Search for packages
| purl | pkg:pypi/dulwich@0.3.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-74n4-53mc-2uc3
Aliases: CVE-2014-9706 GHSA-4j5j-58j7-6c3w PYSEC-2015-34 |
The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree. |
Affected by 1 other vulnerability. |
|
VCID-duga-b9sn-b7fc
Aliases: CVE-2015-0838 GHSA-vjjf-3rvg-gv3v PYSEC-2015-35 |
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file. |
Affected by 1 other vulnerability. |
|
VCID-wegc-1zcu-qygw
Aliases: CVE-2017-16228 GHSA-cwwh-4382-6fwr PYSEC-2017-12 |
Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||