Jgit

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-4949 May 21, 07:16 Maven MEDIUM POC PATCH This Week

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Denial Of Service Information Disclosure XXE Red Hat Suse +2

NVD

CVSS 4.0

6.8

EPSS

0.2%

CVE-2023-4759 Sep 12, 10:15 Maven HIGH PATCH This Week

Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Apple Microsoft Jgit Eclipse

NVD

CVSS 3.1

8.8

EPSS

1.9%

CVE-2025-4949 Maven

EPSS 0% CVSS 6.8

MEDIUM POC PATCH This Week

Denial Of Service Information Disclosure XXE +4

NVD

CVE-2023-4759 Maven

EPSS 2% CVSS 8.8

HIGH PATCH This Week

RCE Apple Microsoft +2

NVD