Login Request a demo
GI
Product
git
by git · last CVE Jul 8, 2025
On CISA KEVExploited in the wild
24
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 2High 10Medium 4Low 1
Severity
All severities24Critical2High10Medium4Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add git to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-48386
6.3
0%
Jul 8
Git allows a buffer overflow in 'wincred' credential helper
Affected: < 2.43.7; >= 2.44.0-rc0, < 2.44.4; >= 2.45.0-rc0, < 2.45.4; >= 2.46.0-rc0, < 2.46.4; >= 2.47.0-rc0, < 2.47.3; >= 2.48.0-rc0, < 2.48.2; +2 more
CVE-2023-22490
5.5
1%
Feb 14
Git vulnerable to local clone-based data exfiltration with non-local transports
Affected: >= 2.39.0, < 2.39.2; >= 2.38.0, < 2.38.4; >= 2.37.0, < 2.37.6; >= 2.36.0, < 2.36.5; >= 2.35.0, < 2.35.7; >= 2.34.0, < 2.34.7; +4 more
CVE-2022-39253
5.5
1%
Oct 19
Git subject to exposure of sensitive information via local clone of symbolic links
Affected: < 2.30.6; < 2.31.5; < 2.32.4; < 2.33.5; < 2.34.5; < 2.35.5; +2 more
CVE-2024-50349
4.7
1%
Jan 14
Git does not sanitize URLs when asking for credentials interactively
Affected: <= 2.40.3; >= 2.41.0, <= 2.41.2; >= 2.42.0, <= 2.42.3; >= 2.43.0, <= 2.43.5; >= 2.44.0, <= 2.44.2; >= 2.45.0, <= 2.45.2; +3 more
Showing 4