HSEC-2023-0012
NoneCVSS
—
EPSS
—
Published
Nov 14, 2025
CISA due date
—
The record
git-annex checksum exposure to encrypted special remotes
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Hackage | git-annex | 0.20110417 | 6.20160419 |
Related vulnerabilities
- CVE-2017-1000117 A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and… Also affects git-annex
- CVE-2017-12836 CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote… Also affects git-annex
- CVE-2017-9800 A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19… Also affects git-annex