GC
Product
Git Client
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 1
Watch
Add Git Client to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10392 | 8.8 | Sep 12 | Jenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote', resulting in OS command… Affected: through 2.8.4; 3.0.0 |
| CVE-2022-36881 | 8.1 | Jul 27 | Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks Affected: through 3.11.0 |
| CVE-2026-57282 | 5.0 | Jun 24 | Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script, allowing attackers able… Affected: before 6.6.1 |
| CVE-2025-67640 | 5.0 | Dec 10 | Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the… Affected: before 6.4.1 |
| CVE-2025-58458 | 4.3 | Sep 3 | In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the… Affected: through 6.1.3; 6.3.0 through 6.3.2; 6.2.0 |
| CVE-2017-1000242 | 3.3 | Nov 1 | Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure Affected: through 2.4.2 |
Showing 6