Gitingest
Source repositories
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-82289 | Hig | 0.48 | 7.4 | — | Aug 28, 2026 | Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to… | ||
| CVE-2024-56074 | Med | 0.29 | 5.5 | 0.00 | Dec 15, 2024 | gitingest before 9996a06 mishandles symbolic links that point outside of the base directory. |
- risk 0.48cvss 7.4epss —
Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to…
- risk 0.29cvss 5.5epss 0.00
gitingest before 9996a06 mishandles symbolic links that point outside of the base directory.