Login Request a demo
GI
Product
git
by git · last CVE Jul 8, 2025
On CISA KEVExploited in the wild
24
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 2High 10Medium 4Low 1
Severity
All severities24Critical2High10Medium4Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add git to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-48384
In wildKEV
8.0
4%
Jul 8
Git allows arbitrary code execution through broken config quoting
Affected: < 2.43.7; >= 2.44.0-rc0, < 2.44.4; >= 2.45.0-rc0, < 2.45.4; >= 2.46.0-rc0, < 2.46.4; >= 2.47.0-rc0, < 2.47.3; >= 2.48.0-rc0, < 2.48.2; +2 more
CVE-2024-52005
8.8
1%
Jan 15
The sideband payload is passed unfiltered to the terminal in git
Affected: >= 2.48.0, <= 2.48.1; >= 2.47.0, <= 2.47.1; >= 2.46.0, <= 2.46.3; >= 2.45.0, <= 2.45.3; >= 2.44.0, <= 2.44.3; >= 2.43.0, <= 2.43.6; +3 more
CVE-2022-39260
8.8
4%
Oct 19
Git vulnerable to Remote Code Execution via Heap overflow in `git shell`
Affected: < 2.30.6; > 2.31.0, < 2.31.5; > 2.32.0, < 2.32.4; > 2.33.0, < 2.33.5; > 2.34.0, < 2.34.5; > 2.34.0, < 2.35.5; +2 more
CVE-2025-48385
8.6
1%
Jul 8
Git alllows arbitrary file writes via bundle-uri parameter injection
Affected: < 2.43.7; >= 2.44.0-rc0, < 2.44.4; >= 2.45.0-rc0, < 2.45.4; >= 2.46.0-rc0, < 2.46.4; >= 2.47.0-rc0, < 2.47.3; >= 2.48.0-rc0, < 2.48.2; +2 more
CVE-2024-32465
7.8
1%
May 14
Git's protections for cloning untrusted repositories can be bypassed
Affected: = 2.45.0; = 2.44.0; >= 2.43.0, < 2.43.4; >= 2.42.0, < 2.42.2; = 2.41.0; >= 2.40.0, < 2.40.2; +1 more
CVE-2024-32004
7.8
1%
May 14
Git vulnerable to Remote Code Execution while cloning special-crafted local repositories
Affected: = 2.45.0; = 2.44.0; >= 2.43.0, < 2.43.4; >= 2.42.0, < 2.42.2; = 2.41.0; >= 2.40.0, < 2.40.2; +1 more
CVE-2024-52006
7.5
1%
Jan 14
Newline confusion in credential helpers can lead to credential exfiltration in git
Affected: <= 2.40.3; >= 2.41.0, <= 2.41.2; >= 2.42.0, <= 2.42.3; >= 2.43.0, <= 2.43.5; >= 2.44.0, <= 2.44.2; >= 2.45.0, <= 2.45.2; +3 more
CVE-2023-23946
7.5
1%
Feb 14
Git's `git apply` overwriting paths outside the working tree
Affected: >= 2.39.0, < 2.39.2; >= 2.38.0, < 2.38.4; >= 2.37.0, < 2.37.6; >= 2.36.0, < 2.36.5; >= 2.35.0, < 2.35.7; >= 2.34.0, < 2.34.7; +4 more
CVE-2020-5260
7.5
10%
Apr 14
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker
Affected: before 2.17.4; 2.22.0 before 2.22.3
CVE-2024-32021
7.1
1%
May 14
Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory
Affected: = 2.45.0; = 2.44.0; >= 2.43.0, < 2.43.4; >= 2.42.0, < 2.42.2; = 2.41.0; >= 2.40.0, < 2.40.2; +1 more
Showing 10