git-p4 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the git-p4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Arbitrary Argument Injection	*
M External Control of File Name or Path	*
M OS Command Injection	*
M Buffer Overflow	*
L Improper Encoding or Escaping of Output	*
L Improper Encoding or Escaping of Output	*
M Improper Encoding or Escaping of Output	*
M Directory Traversal	*
L Symlink Following	*
H Directory Traversal	*
L UNIX Hard Link	*
H Directory Traversal	<0:1.8.3.1-25.el7_9
H Arbitrary Code Injection	<0:1.8.3.1-25.el7_9
L Use of Externally-Controlled Format String	*
M Directory Traversal	*
M Resource Leak	*
H Integer Overflow or Wraparound	<0:1.8.3.1-24.el7_9
H Integer Overflow or Wraparound	<0:1.8.3.1-24.el7_9
M Link Following	*
M Out-of-bounds Write	*
M Uncontrolled Search Path Element	*
M Improper Input Validation	*
H Arbitrary Command Injection	<0:1.8.3.1-20.el7
H Improper Input Validation	<0:1.8.3.1-14.el7_5
H Improper Input Validation	<0:1.8.3.1-12.el7_4
M OS Command Injection	<0:1.8.3.1-11.el7
H Incorrect Calculation of Buffer Size	<0:1.8.3.1-6.el7_2.1
H Incorrect Calculation of Buffer Size	<0:1.8.3.1-6.el7_2.1
M Arbitrary Command Injection	<0:1.8.3.1-6.el7
H Improper Input Validation	<0:1.8.3.1-23.el7_8
H Improper Input Validation	<0:1.8.3.1-22.el7_8
H Improper Input Validation	<0:1.8.3.1-21.el7_7
M Improper Input Validation	*
M Improper Input Validation	*
M CVE-2017-8386	<0:1.8.3.1-11.el7
M Improper Input Validation	*
L Resource Exhaustion	*
M Link Following	*
M OS Command Injection	*