Skip to content

Product

pkg/maven/org.eclipse.jgit/org.eclipse.jgit vulnerabilities

1 published CVE affecting pkg/maven/org.eclipse.jgit/org.eclipse.jgit, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest pkg/maven/org.eclipse.jgit/org.eclipse.jgit CVEs

Newest publication first

  1. CVE-2025-4949 XXE vulnerability in Eclipse JGit

    Published
    MediumCVSS 6.8 EPSS 0.84%

    In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML Exte...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.