Junglewise Threat Intelligence

CVE-2023-22742: RUSTSEC-2023-0003 - git2 does not verify SSH keys by default

CVE-2023-22742 · Severity: low · CVSS 3.1 · Published 2023-01-20

Technologies: libgit2-sys (crates.io). Vendors: crates.io.

Executive brief

git2 does not verify SSH keys by default

Affected products

crates.io libgit2-sys

Related threats

libgit2-sys affected by memory corruption, denial of service, and arbitrary code execution in libgit2
RUSTSEC-2024-0013 - Memory corruption, denial of service, and arbitrary code execution in libgit2