pkg:Debian/fossil
3 total CVEsHIGH3
✅ Check your installed version
All known vulnerabilities
HIGH8.8CVE-2020-24614Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. from 0, < 1:2.12.1-1
HIGH8.8CVE-2017-17459http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary comma… from 0, < 1:2.4-1
HIGH7.5CVE-2021-36377Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation. from 0, < 1:2.15.2-1