{"schema_version":1,"title":"Dulwich vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 5 vulnerabilities in Dulwich: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, Dulwich arbitrary file write on Windows via unvalidated drive letters, was published on 2 October 2026. Nothing in the last four weeks, down from 5 vulnerabilities in the four before. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/dulwich","json_url":"https://junglewise.ai/threats/vendors/dulwich.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/dulwich","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":4,"all_time":5,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":5,"last_365_days":5},"latest":[{"cvss":8.8,"slug":"dulwich-arbitrary-file-write-rce-on-windows-via-unvalidated-drive-fc90311d","title":"Dulwich arbitrary file write on Windows via unvalidated drive letters","severity":"high","exploited":false,"published_at":"2026-10-02T19:14:21+00:00","url":"https://junglewise.ai/threats/dulwich-arbitrary-file-write-rce-on-windows-via-unvalidated-drive-fc90311d"},{"cvss":6.5,"slug":"dulwich-infinite-loop-denial-of-service-dos-in-packfile-object-d71acec7","title":"Dulwich infinite loop denial of service in packfile object resolution","severity":"medium","exploited":false,"published_at":"2026-10-02T18:54:39+00:00","url":"https://junglewise.ai/threats/dulwich-infinite-loop-denial-of-service-dos-in-packfile-object-d71acec7"},{"cvss":8.6,"slug":"dulwich-symlink-write-through-in-checkout-paths-via-raw-os-open-7e9ebad6","title":"Dulwich symlink write-through in checkout via os.open","severity":"high","exploited":false,"published_at":"2026-10-02T18:53:35+00:00","url":"https://junglewise.ai/threats/dulwich-symlink-write-through-in-checkout-paths-via-raw-os-open-7e9ebad6"},{"cvss":8.6,"slug":"dulwich-symlink-directory-traversal-in-filter-branch-index-filter-via-c34daf58","title":"Dulwich symlink directory traversal in filter-branch index_filter","severity":"high","exploited":false,"published_at":"2026-10-02T18:53:05+00:00","url":"https://junglewise.ai/threats/dulwich-symlink-directory-traversal-in-filter-branch-index-filter-via-c34daf58"},{"cvss":8.6,"slug":"dulwich-symlink-directory-traversal-in-stash-pop-allows-arbitrary-file-12378d39","title":"Dulwich symlink directory traversal in stash pop","severity":"high","exploited":false,"published_at":"2026-10-02T18:52:53+00:00","url":"https://junglewise.ai/threats/dulwich-symlink-directory-traversal-in-stash-pop-allows-arbitrary-file-12378d39"}],"vendor":{"hub":true,"name":"Dulwich","slug":"dulwich","description":"Developer of Dulwich, a Python implementation of the Git version control system.","url":"https://junglewise.ai/threats/vendors/dulwich"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cvss":8.8,"slug":"dulwich-arbitrary-file-write-rce-on-windows-via-unvalidated-drive-fc90311d","title":"Dulwich arbitrary file write on Windows via unvalidated drive letters","severity":"high","exploited":false,"published_at":"2026-10-02T19:14:21+00:00","url":"https://junglewise.ai/threats/dulwich-arbitrary-file-write-rce-on-windows-via-unvalidated-drive-fc90311d"},{"cvss":8.6,"slug":"dulwich-symlink-write-through-in-checkout-paths-via-raw-os-open-7e9ebad6","title":"Dulwich symlink write-through in checkout via os.open","severity":"high","exploited":false,"published_at":"2026-10-02T18:53:35+00:00","url":"https://junglewise.ai/threats/dulwich-symlink-write-through-in-checkout-paths-via-raw-os-open-7e9ebad6"},{"cvss":8.6,"slug":"dulwich-symlink-directory-traversal-in-filter-branch-index-filter-via-c34daf58","title":"Dulwich symlink directory traversal in filter-branch index_filter","severity":"high","exploited":false,"published_at":"2026-10-02T18:53:05+00:00","url":"https://junglewise.ai/threats/dulwich-symlink-directory-traversal-in-filter-branch-index-filter-via-c34daf58"},{"cvss":8.6,"slug":"dulwich-symlink-directory-traversal-in-stash-pop-allows-arbitrary-file-12378d39","title":"Dulwich symlink directory traversal in stash pop","severity":"high","exploited":false,"published_at":"2026-10-02T18:52:53+00:00","url":"https://junglewise.ai/threats/dulwich-symlink-directory-traversal-in-stash-pop-allows-arbitrary-file-12378d39"},{"cvss":6.5,"slug":"dulwich-infinite-loop-denial-of-service-dos-in-packfile-object-d71acec7","title":"Dulwich infinite loop denial of service in packfile object resolution","severity":"medium","exploited":false,"published_at":"2026-10-02T18:54:39+00:00","url":"https://junglewise.ai/threats/dulwich-infinite-loop-denial-of-service-dos-in-packfile-object-d71acec7"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Dulwich","slug":"dulwich-dulwich","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dulwich-dulwich"}]}