Skip to content

Conversation

@jlsec-bot
Copy link
Contributor

This action searched recent NVD/EUVD changes/publications, checking 703 (+8) advisories from NVD and 370 (+366) from EUVD for advisories that pertain here. It identified 3 advisories as being related to the Julia package(s): Git_jll, libssh_jll, and GnuTLS_jll.

1 advisories apply to all registered versions of a package

These advisories had no obvious failures but computed a range without bounds.

  • CVE-2025-32988 for packages: GnuTLS_jll
    • GnuTLS_jll computed ["*"]. Its latest version (3.8.4+0) has components: {gnutls = "3.8.4"}
      • gnu:gnutls at < 3.8.10 includes all versions

2 advisories found concrete vulnerable ranges

  • CVE-2025-48384 for packages: Git_jll
    • Git_jll computed ["< 2.50.1+0"]. Its latest version (2.51.3+0) has components: {git-for-windows = "2.51.2.windows.1", git = "2.51.2"}
  • CVE-2025-5318 for packages: libssh_jll
    • libssh_jll computed ["< 0.11.3+0"]. Its latest version (0.11.3+0) has components: {libssh = "0.11.3"}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants