{"answers":{"affected":"It affects 4 products.","exploited":"There is no known exploitation of CVE-2022-29187 in the wild and no public exploit code.","fix":"Upgrade to a fixed version.","what":"CVE-2022-29187 is a high-severity vulnerability in Apple Xcode, published on 12 Jul 2022. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2022-29187 and fix it if it is affected.\n\nWhat it is: CVE-2022-29187 is a high-severity vulnerability in Apple Xcode, published on 12 Jul 2022. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2022-29187 in the wild and no public exploit code.\n\nAffected product: Apple Xcode. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2022-29187/ (Markdown: https://insights.sbomify.com/CVE-2022-29187/index.md)","id":"CVE-2022-29187","markdown":"https://insights.sbomify.com/CVE-2022-29187/index.md","name":"CVE-2022-29187","record":{"aliases":["ALPINE-CVE-2022-29187","CLEANSTART-2026-EQ09700","DEBIAN-CVE-2022-29187","GHSA-j342-m5hw-rr3v","OESA-2022-1765","SUSE-SU-2022:2535-1","SUSE-SU-2022:2537-1","SUSE-SU-2022:2550-1","UBUNTU-CVE-2022-29187","USN-5511-1","openSUSE-SU-2024:12188-1","openSUSE-SU-2024:13449-1"],"analysis":{"component_type":"developer_tool","fix_type":"upgrade","impacts":["privilege_escalation","code_execution"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Git version control","requires_auth":"low_privilege","summary":"Attackers can escalate privileges by exploiting safe.directory bypasses when root users navigate attacker-controlled Git repositories.","user_interaction":"not_required","vuln_class":"privilege_escalation"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"GitHub_M","cpe":[{"product":"xcode","vendor":"apple"},{"product":"debian_linux","vendor":"debian"},{"product":"fedora","vendor":"fedoraproject"},{"product":"git","vendor":"git-scm"}],"cvss":{"score":7.8,"severity":"high","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[{"id":"CWE-427","name":"Uncontrolled Search Path Element"},{"id":"CWE-282","name":"Improper Ownership Management"}],"description":"Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when navigating as root into a shared tmp directory that is owned by them, but where an attacker could create a git repository. Versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5 contain a patch for this issue. The simplest way to avoid being affected by the exploit described in the example is to avoid running git as root (or an Administrator in Windows), and if needed to reduce its use to a minimum. While a generic workaround is not possible, a system could be hardened from the exploit described in the example by removing any such repository if it exists already and creating one as root to block any future attacks.","ecosystems":["SUSE:Enterprise Storage 6","SUSE:Enterprise Storage 7","SUSE:HPE Helion OpenStack 8","SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","SUSE:Linux Enterprise High Performance Computing 15-ESPOS","SUSE:Linux Enterprise High Performance Computing 15-LTSS","SUSE:Linux Enterprise Module for Basesystem 15 SP3","SUSE:Linux Enterprise Module for Basesystem 15 SP4","SUSE:Linux Enterprise Module for Development Tools 15 SP3","SUSE:Linux Enterprise Module for Development Tools 15 SP4","SUSE:Linux Enterprise Server 12 SP2-BCL","SUSE:Linux Enterprise Server 12 SP3-BCL","SUSE:Linux Enterprise Server 12 SP4-LTSS","SUSE:Linux Enterprise Server 12 SP5","SUSE:Linux Enterprise Server 15 SP1-BCL","SUSE:Linux Enterprise Server 15 SP1-LTSS","SUSE:Linux Enterprise Server 15 SP2-BCL","SUSE:Linux Enterprise Server 15 SP2-LTSS","SUSE:Linux Enterprise Server 15-LTSS","SUSE:Linux Enterprise Server for SAP Applications 12 SP4","SUSE:Linux Enterprise Server for SAP Applications 12 SP5","SUSE:Linux Enterprise Server for SAP Applications 15","SUSE:Linux Enterprise Server for SAP Applications 15 SP1","SUSE:Linux Enterprise Server for SAP Applications 15 SP2","SUSE:Linux Enterprise Software Development Kit 12 SP5","SUSE:Manager Proxy 4.1","SUSE:Manager Retail Branch Server 4.1","SUSE:Manager Server 4.1","SUSE:OpenStack Cloud 8","SUSE:OpenStack Cloud 9","SUSE:OpenStack Cloud Crowbar 9","openSUSE:Leap 15.3","openSUSE:Leap 15.4","openSUSE:Tumbleweed"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Bypass of safe.directory protections in Git","id":"CVE-2022-29187","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"apple:xcode","products":["apple:xcode","debian:debian_linux","fedoraproject:fedora"],"type":"privilege_escalation","year":"2022"},"n_packages":40,"n_references":15,"next":{"headline":"Smokescreen SSRF via deny list bypass (square brackets) in Smokescreen","id":"CVE-2022-29188"},"packages":[{"ecosystem":"SUSE:Enterprise Storage 6","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Enterprise%20Storage%206","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Enterprise Storage 7","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Enterprise%20Storage%207","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:HPE Helion OpenStack 8","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=HPE%20Helion%20OpenStack%208","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","fixed":["2.35.3-150300.10.15.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3","source":"SUSE-SU-2022:2550-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","fixed":["2.35.3-150300.10.15.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4","source":"SUSE-SU-2022:2550-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","fixed":["2.35.3-150300.10.15.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3","source":"SUSE-SU-2022:2550-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","fixed":["2.35.3-150300.10.15.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4","source":"SUSE-SU-2022:2550-1"},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:Manager Proxy 4.1","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Manager%20Proxy%204.1","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:Manager Server 4.1","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20Manager%20Server%204.1","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"SUSE:OpenStack Cloud 8","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20OpenStack%20Cloud%208","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:OpenStack Cloud 9","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20OpenStack%20Cloud%209","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","fixed":["2.26.2-27.57.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/suse/git\u0026distro=SUSE%20OpenStack%20Cloud%20Crowbar%209","source":"SUSE-SU-2022:2537-1"},{"ecosystem":"openSUSE:Leap 15.3","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/opensuse/git\u0026distro=openSUSE%20Leap%2015.3","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"openSUSE:Leap 15.3","fixed":["2.35.3-150300.10.15.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/opensuse/git\u0026distro=openSUSE%20Leap%2015.3","source":"SUSE-SU-2022:2550-1"},{"ecosystem":"openSUSE:Leap 15.4","fixed":["2.26.2-150000.41.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/opensuse/git\u0026distro=openSUSE%20Leap%2015.4","source":"SUSE-SU-2022:2535-1"},{"ecosystem":"openSUSE:Leap 15.4","fixed":["2.35.3-150300.10.15.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/opensuse/git\u0026distro=openSUSE%20Leap%2015.4","source":"SUSE-SU-2022:2550-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["2.37.1-1.1"],"introduced":["0"],"last_affected":[],"package":"git","purl":"pkg:rpm/opensuse/git\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2024:12188-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["1.7.1-3.1"],"introduced":["0"],"last_affected":[],"package":"libgit2","purl":"pkg:rpm/opensuse/libgit2\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2024:13449-1"}],"prev":{"headline":"Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise","id":"CVE-2022-29186"},"products":["git"],"published":"2022-07-12","related":[{"cvss_score":8.1,"headline":"Git Link Following","id":"CVE-2025-48384","kev_date_added":"2025-08-25","published":"2025-07-08"},{"cvss_score":9.8,"headline":"JGit Improper Input Validation vulnerability","id":"CVE-2014-9390","kev_date_added":null,"published":"2020-02-12"},{"cvss_score":9.8,"headline":"Deserialization of untrusted data in FasterXML jackson-databind","id":"CVE-2019-14379","kev_date_added":null,"published":"2019-07-29"},{"cvss_score":9.8,"headline":"An issue was discovered in certain Apple products.","id":"CVE-2018-4164","kev_date_added":null,"published":"2018-04-03"},{"cvss_score":9.8,"headline":"Use after free in n/a","id":"CVE-2016-0746","kev_date_added":null,"published":"2016-02-15"},{"cvss_score":9.3,"headline":"Missing authorization in n/a","id":"CVE-2004-2687","kev_date_added":null,"published":"2007-09-23"},{"cvss_score":8.8,"headline":"This issue was addressed by enforcing library validation on the affected binaries.","id":"CVE-2026-86948","kev_date_added":null,"published":"2026-10-20"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"SUSE","prefix":"SUSE"},{"class":"attribution","licence":"CC BY 4.0","name":"SUSE","prefix":"openSUSE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2024-08-03","vendors":["git"]},"summary":"Attackers can escalate privileges by exploiting safe.directory bypasses when root users navigate attacker-controlled Git repositories.","url":"https://insights.sbomify.com/CVE-2022-29187/"}