diff --git a/advisories/github-reviewed/2025/05/GHSA-vrpq-qp53-qv56/GHSA-vrpq-qp53-qv56.json b/advisories/github-reviewed/2025/05/GHSA-vrpq-qp53-qv56/GHSA-vrpq-qp53-qv56.json index 891e64a1321..4f61896e7ff 100644 --- a/advisories/github-reviewed/2025/05/GHSA-vrpq-qp53-qv56/GHSA-vrpq-qp53-qv56.json +++ b/advisories/github-reviewed/2025/05/GHSA-vrpq-qp53-qv56/GHSA-vrpq-qp53-qv56.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vrpq-qp53-qv56", - "modified": "2025-05-22T18:49:33Z", + "modified": "2025-05-23T16:26:08Z", "published": "2025-05-21T21:31:37Z", "aliases": [ "CVE-2025-4949" @@ -25,7 +25,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "7.2.0.202503040940-r" }, { "fixed": "7.2.1.202505142326-r" @@ -33,6 +33,63 @@ ] } ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.eclipse.jgit:org.eclipse.jgit" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "7.1.0.202411261347-r" + }, + { + "fixed": "7.1.1.202505221757-r" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.eclipse.jgit:org.eclipse.jgit" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "7.0.0.202409031743-r" + }, + { + "fixed": "7.0.1.202505221510-r" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.eclipse.jgit:org.eclipse.jgit" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "6.10.1.202505221210-r" + } + ] + } + ] } ], "references": [ @@ -52,6 +109,18 @@ "type": "WEB", "url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281" }, + { + "type": "WEB", + "url": "https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1" + }, + { + "type": "WEB", + "url": "https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1" + }, + { + "type": "WEB", + "url": "https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1" + }, { "type": "WEB", "url": "https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1"