GI
Vendor
git
26
CVEs
1
On KEV
0
New 30D
Products
GI9.8
git
git
24 CVEs1 on KEV0 new
GI5.3
Git-shallow-clone
Git
1 CVEs0 on KEV0 new
GI8.8
Git-shell
Git
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-48384 In wildKEV | GI git git | 8.0 | Jul 8 | Git allows arbitrary code execution through broken config quoting |
| CVE-2025-48385 | GI git git | 8.6 | Jul 8 | Git alllows arbitrary file writes via bundle-uri parameter injection |
| CVE-2025-48386 | GI git git | 6.3 | Jul 8 | Git allows a buffer overflow in 'wincred' credential helper |
| CVE-2024-52005 | GI git git | 8.8 | Jan 15 | The sideband payload is passed unfiltered to the terminal in git |
| CVE-2024-50349 | GI git git | 4.7 | Jan 14 | Git does not sanitize URLs when asking for credentials interactively |
| CVE-2024-52006 | GI git git | 7.5 | Jan 14 | Newline confusion in credential helpers can lead to credential exfiltration in git |
| CVE-2024-21531 | GI Git-shallow-clone Git | 5.3 | Oct 1 | All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone… |
| CVE-2024-32465 | GI git git | 7.8 | May 14 | Git's protections for cloning untrusted repositories can be bypassed |
| CVE-2024-32021 | GI git git | 7.1 | May 14 | Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory |
| CVE-2024-32020 | GI git git | 3.3 | May 14 | Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will |
| CVE-2024-32004 | GI git git | 7.8 | May 14 | Git vulnerable to Remote Code Execution while cloning special-crafted local repositories |
| CVE-2024-32002 | GI git git | 9.0 | May 14 | Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution |
| CVE-2023-23946 | GI git git | 7.5 | Feb 14 | Git's `git apply` overwriting paths outside the working tree |
| CVE-2023-22490 | GI git git | 5.5 | Feb 14 | Git vulnerable to local clone-based data exfiltration with non-local transports |
| CVE-2022-39253 | GI git git | 5.5 | Oct 19 | Git subject to exposure of sensitive information via local clone of symbolic links |
| CVE-2022-39260 | GI git git | 8.8 | Oct 19 | Git vulnerable to Remote Code Execution via Heap overflow in `git shell` |
| CVE-2022-25648 | GI Git Git | 9.8 | Apr 19 | The package git before 1.11.0 are vulnerable to Command Injection via git argument injection |
| CVE-2020-5260 | GI Git Git | 7.5 | Apr 14 | Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker |
| CVE-2017-8386 | GI Git-shell Git | 8.8 | Jun 1 | git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and… |
| CVE-2010-3906 | GI Git Git | – | Dec 17 | Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters |
| CVE-2009-2108 | GI Git Git | – | Jun 18 | git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized… |
| CVE-2008-5916 | GI Git Git | – | Jan 21 | gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local… |
| CVE-2008-5516 | GI Git Git | – | Jan 20 | The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search |
| CVE-2008-5517 | GI Git Git | – | Jan 13 | The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object |
| CVE-2008-3546 | GI Git Git | – | Aug 7 | Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length… |
| CVE-2006-0477 | GI Git Git | – | Jan 31 | Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link |