Beveiligingsadvies

CVE-2024-51990

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-07 00:15:17
Laatst bijgewerkt 2024-11-07 16:57:48
Toegewezen door GitHub_M
CVSS-score 9.3
Status PUBLISHED

Beschrijving

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause `jj` to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from unknown sources.