MichaelMure github.com/MichaelMure/git-bug vulnerabilities

Latest MichaelMure github.com/MichaelMure/git-bug CVEs

Newest publication first

1. CVE-2021-28955 Arbitrary code execution due to an uncontrolled search path for the git binary

   Published 2021-03-22

   Critical·CVSS 9.8 EPSS 1.7%

   git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations (most often seen on Windows).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.