Skip to content

Data quality issue with CVE-2019-1387 #1961

@IgorTodorovskiIBM

Description

@IgorTodorovskiIBM

The CVE ID
CVE-2019-1387

Describe the data quality issue observed
Git 2.43 is not affected (affects 2.24 and earlier), yet passing the Git 2.43 commit sha as input yields CVE-2019-1387 as a vulnerability.

curl -d \
  '{"commit": "564d0252ca632e0264ed670534a51d18a689ef5d"}' \
  "https://api.osv.dev/v1/query"

This is the head commit for Git 2.43:

commit 564d0252ca632e0264ed670534a51d18a689ef5d (HEAD -> v2.43.0, tag: v2.43.0, origin/maint)
Author: Junio C Hamano <gitster@pobox.com>
Date:   Mon Nov 20 08:47:38 2023 +0900

    Git 2.43

    Signed-off-by: Junio C Hamano <gitster@pobox.com>

Suggested changes to record
Should affect 2.24 and earlier.

Additional context
Add any other context about the problem here.

Metadata

Metadata

Assignees

Labels

data qualityIssues with data quality

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions