| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0.x | ❌ |
Please report security issues by e-mail to jelmer@jelmer.uk, ideally PGP encrypted to the key at https://jelmer.uk/D729A457.asc
Security: jelmer/dulwich
Security
SECURITY.md
-
Submodule clone allows writing to arbitrary pathGHSA-gfhv-vqv2-4544 published
May 28, 2026 by jelmerHigh -
Unbounded memory allocation in receive-pack from crafted thin packsGHSA-xrvj-v92f-53gj published
May 28, 2026 by jelmerModerate -
Commit subjects not sanitized in ``porcelain.format_patch``GHSA-555p-6grf-mh7f published
May 28, 2026 by jelmerLow -
Command Injection via Merge Driver PathGHSA-9277-mp7x-85jf published
May 28, 2026 by jelmerHigh -
Arbitrary file write via NTFS-hostile tree entries on WindowsGHSA-897w-fcg9-f6xj published
May 28, 2026 by jelmerHigh
Learn more about advisories related to jelmer/dulwich in the GitHub Advisory Database