The CVE ID
CVE-2019-1387
Describe the data quality issue observed
Git 2.43 is not affected (affects 2.24 and earlier), yet passing the Git 2.43 commit sha as input yields CVE-2019-1387 as a vulnerability.
curl -d \
'{"commit": "564d0252ca632e0264ed670534a51d18a689ef5d"}' \
"https://api.osv.dev/v1/query"
This is the head commit for Git 2.43:
commit 564d0252ca632e0264ed670534a51d18a689ef5d (HEAD -> v2.43.0, tag: v2.43.0, origin/maint)
Author: Junio C Hamano <[email protected]>
Date: Mon Nov 20 08:47:38 2023 +0900
Git 2.43
Signed-off-by: Junio C Hamano <[email protected]>
Suggested changes to record
Should affect 2.24 and earlier.
Additional context
Add any other context about the problem here.
The CVE ID
CVE-2019-1387
Describe the data quality issue observed
Git 2.43 is not affected (affects 2.24 and earlier), yet passing the Git 2.43 commit sha as input yields CVE-2019-1387 as a vulnerability.
This is the head commit for Git 2.43:
Suggested changes to record
Should affect 2.24 and earlier.
Additional context
Add any other context about the problem here.