TI-2025-34357 CVE-2025-54585 · GHSA-39p2-8hq9-fwj6
GitProxy is vulnerable to a new branch approval exploit
Priority HIGH 69
GitProxy is an application that stands between developers and a Git remote endpoint.
finos
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
finos records in CISA KEVNo finos vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Gitproxy · all components
TI-2025-34355 CVE-2025-54583 · GHSA-qr93-8wwf-22g4
GitProxy bypasses approvals when pushing multiple branches
Priority HIGH 69
GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com).
TI-2025-34358 CVE-2025-54586 · GHSA-v98g-8rqx-g93g
GitProxy is susceptible to a hidden commits injection attack
Priority MEDIUM 64
GitProxy is an application that stands between developers and a Git remote endpoint.
TI-2025-34356 CVE-2025-54584 · GHSA-xxmh-rf63-qwjv
GitProxy is vulnerable to a packfile parsing exploit
Priority MEDIUM 64
GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com).