Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.eclipse.jgit:org.eclipse.jgit

3 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 1 medium
Dependents
410
Registry
Maven Central

Advisories 3

  • CVE-2025-4949Medium 6.8

    XXE vulnerability in Eclipse JGit

    Affected: from 7.2.0.202503040940-r, fixed in 7.2.1.202505142326-r; from 7.1.0.202411261347-r, fixed in 7.1.1.202505221757-r; from 7.0.0.202409031743-r, fixed in 7.0.1.202505221510-r; from 6.1.0.202203080745-r, fixed in 6.10.1.202505221210-r; from 6.0.0.202110060947-m1, fixed in 6.0.0.202111291000-r; fixed in 5.13.4.202507202350-r.

  • Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write

    Affected: from 6.0.0.202111291000-r, fixed in 6.6.1.202309021850-r; fixed in 5.13.3.202401111512-r.

  • Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial…

    Affected: fixed in 3.5.3.