https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T16:26:23.176046+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-1000117 CVE-2017-1000117 2026-10-06T16:26:23.203660+00:00

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.

 https://vulnerability.circl.lu/vuln/usn-3387-1 USN-3387-1 — git vulnerability 2026-10-06T16:26:23.203802+00:00

Affected: Ubuntu:14.04:LTS: git, Ubuntu:16.04:LTS: git

Brian Neel, Joern Schneeweisz, and Jeff King discovered that Git did not properly handle host names in 'ssh://' URLs. A remote attacker could use this to construct a git repository that when accessed could run arbitrary code with the privileges of the user.