Product by Jelmer
Dulwich
10 known vulnerabilities in Dulwich (Jelmer), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-114094 | Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths | 8.8 | |
| High | CVE-2026-42305 | Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows | 8.8 | |
| High | CVE-2026-42563 | Dulwich Vulnerable to Command Injection via Merge Driver Path | — | |
| High | CVE-2026-114095 | Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object | 6.5 | |
| High | CVE-2026-114097 | Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter | 7.8 | |
| High | CVE-2026-114096 | Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths | 7.8 | |
| High | CVE-2026-114098 | Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks | 7.8 | |
| High | CVE-2026-52726 | Jelmer Dulwich: Path Traversal | 7.5 | |
| Medium | CVE-2026-47734 | Dulwich has unbounded memory allocation in receive-pack from crafted thin packs | 5.7 | |
| Low | CVE-2026-47712 | Dulwich doesn't sanitize commit subjects in `porcelain.format_patch` | 3.3 |