Git-Annex Project Git-Annex
4 CVEs affecting Git-Annex Project Git-Annex. Latest disclosed: 2025-06-26. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-12976 | High | 8.8 | 2017-08-20 | git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrate… |
CVE-2014-6274 | High | 7.5 | 2025-06-26 | git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS… |
CVE-2018-10857 | Medium | 5.9 | 2018-07-16 | git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or c… |
CVE-2018-10859 | Medium | 5.9 | 2018-07-16 | git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file… |