Read the docs

Git-annex Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Git-annex Project records in CISA KEV

No Git-annex Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Git-annex 4 records MEDIUM

Records

4 records in Git-annex · all components

TI-2017-09619 CVE-2017-12976 · GHSA-jqcx-qqvc-9wx5

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an…

Priority MEDIUM 44

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-201…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0312 Published 2017-08-20 No fix listed CWE-20
TI-2014-05160 CVE-2014-6274 · GHSA-ppj6-rmfj-4vjx

S3 and Glacier remotes creds embedded in the git repo were not encrypted

Priority LOW 38

git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in (effectivel…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00177 Published 2025-06-26 Fixed in 5.20140919 CWE-311
TI-2018-07673 CVE-2018-10859 · GHSA-j24g-q5jp-xg4v

Information disclosure in [UNKNOWN] git-annex

Priority LOW 36

git-annex is vulnerable to an Information Exposure when decrypting files.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01362 Published 2018-07-16 No fix listed CWE-200
TI-2018-07671 CVE-2018-10857 · GHSA-f7cm-x4r7-4852

Information disclosure in [UNKNOWN] git-annex

Priority LOW 36

git-annex is vulnerable to a private data exposure and exfiltration attack.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01539 Published 2018-07-16 No fix listed CWE-200
Open these records in search →