1 line
625 B
JSON
1 line
625 B
JSON
{"ghsa": "GHSA-gfhv-vqv2-4544", "repo": "jelmer/dulwich", "cwes": ["CWE-22"], "summary": "submodule: Reject unsafe submodule paths in submodule_update", "fix_commit": "1ca18147a1d03b61c2ae203c46bf0b2a2f5dd421", "parent_commit": "3559ef15c1e2a8d2a56c98f36b53b29c5d60b9fd", "vuln_files": ["dulwich/porcelain/submodule.py", "dulwich/index.py"], "vuln_lines": {"dulwich/porcelain/submodule.py": [25, 89, 125, 140, 146, 233], "dulwich/index.py": [62, 2075]}, "source_files": 84, "scope_dirs": ["dulwich"], "source_note": "Subset: only the dulwich/ package (containing both vuln files) was copied into source/, not the full repo."} |