Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Git-annex Project Component: Git-annex Clear all filters
TI-2014-05160 CVE-2014-6274 · GHSA-ppj6-rmfj-4vjx

S3 and Glacier remotes creds embedded in the git repo were not encrypted

Priority LOW 38

git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in (effectivel…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00177 Published 2025-06-26 Fixed in 5.20140919 CWE-311
TI-2018-07671 CVE-2018-10857 · GHSA-f7cm-x4r7-4852

Information disclosure in [UNKNOWN] git-annex

Priority LOW 36

git-annex is vulnerable to a private data exposure and exfiltration attack.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01539 Published 2018-07-16 No fix listed CWE-200
TI-2018-07673 CVE-2018-10859 · GHSA-j24g-q5jp-xg4v

Information disclosure in [UNKNOWN] git-annex

Priority LOW 36

git-annex is vulnerable to an Information Exposure when decrypting files.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01362 Published 2018-07-16 No fix listed CWE-200
TI-2017-09619 CVE-2017-12976 · GHSA-jqcx-qqvc-9wx5

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an…

Priority MEDIUM 44

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-201…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0312 Published 2017-08-20 No fix listed CWE-20