VULNERABILITY INTELLIGENCE

CVE-2024-51990

EPSS probability0.61%
CISA KEVNot currently listed
Published2024-11-07
Last modified2026-06-17

Description

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause `jj` to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from unknown sources.

Weakness classification

  • security-advisories@github.com: CWE-22

Primary references