Jjutsu VCS vulnerability can causefiles outside the clone
CVE-2024-51990

Currently unrated

Key Information:

Vendor

Git

Vendor
CVE Published:
7 November 2024

What is CVE-2024-51990?

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from unknown sources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/martinvonz/jj/security/advisories/GHSA...

Timeline

  • Vulnerability published

JSON
.