Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: finos Component: Gitproxy Clear all filters
TI-2025-34356 CVE-2025-54584 · GHSA-xxmh-rf63-qwjv

GitProxy is vulnerable to a packfile parsing exploit

Priority MEDIUM 64

GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com).

CVSS 4.0HIGH 7.0 Network Low privileges No interaction EPSS 0.00571 Published 2025-07-30 Fixed in 1.19.2 CWE-115
TI-2025-34355 CVE-2025-54583 · GHSA-qr93-8wwf-22g4

GitProxy bypasses approvals when pushing multiple branches

Priority HIGH 69

GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com).

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00529 Published 2025-07-30 Fixed in 1.19.2 CWE-863