Git-scm - vulnerabilities (CVEs)

41 CVEs in 1 products, 0 in the last 30 days, newest from 2025-07-08.

Products

• Git - 41 CVEs

Newest CVEs of Git-scm

• CVE-2025-48384 - CVSS 8.1 (high), 2025-07-08: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to…
• CVE-2024-32465 - CVSS 7.8 (high), 2024-05-14: Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone…
• CVE-2024-32021 - CVSS 7.1 (high), 2024-05-14: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that…
• CVE-2024-32020 - CVSS 3.9 (low), 2024-05-14: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into…
• CVE-2024-32004 - CVSS 8.2 (high), 2024-05-14: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in…
• CVE-2023-29007 - CVSS 7.8 (high), 2023-04-25: Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially…
• CVE-2023-25652 - CVSS 7.5 (high), 2023-04-25: Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding…
• CVE-2023-23946 - CVSS 7.5 (high), 2023-02-14: Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and…
• CVE-2023-22490 - CVSS 5.5 (medium), 2023-02-14: Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6,…
• CVE-2022-23521 - CVSS 9.8 (critical), 2023-01-17: Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a…
• CVE-2022-41903 - CVSS 9.8 (critical), 2023-01-17: Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also…
• CVE-2022-41953 - CVSS 8.6 (high), 2023-01-17: Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line.…
• CVE-2022-39260 - CVSS 8.8 (high), 2022-10-19: Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull…
• CVE-2022-39253 - CVSS 5.5 (medium), 2022-10-19: Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are…
• CVE-2022-29187 - CVSS 7.8 (high), 2022-07-12: Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to…
• CVE-2022-24765 - CVSS 7.8 (high), 2022-04-12: Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties…
• CVE-2022-24975 - CVSS 7.5 (high), 2022-02-11: The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a…
• CVE-2021-40330 - CVSS 7.5 (high), 2021-08-31: git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol…
• CVE-2021-21300 - CVSS 8 (high), 2021-03-09: Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as…
• CVE-2020-11008 - CVSS 7.5 (high), 2020-04-21: Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is…
• CVE-2020-5260 - CVSS 9.3 (critical), 2020-04-14: Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses…
• CVE-2014-9390 - CVSS 9.8 (critical), 2020-02-12: Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows…
• CVE-2019-1348 - CVSS 3.3 (low), 2020-01-24: An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks…
• CVE-2019-1353 - CVSS 9.8 (critical), 2020-01-24: An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in…
• CVE-2019-1387 - CVSS 8.8 (high), 2019-12-18: An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are…
• CVE-2019-19604 - CVSS 7.8 (high), 2019-12-11: Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before 2.23.1, and 2.24.x before 2.24.1…
• CVE-2018-19486 - CVSS 9.8 (critical), 2018-11-23: Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the…
• CVE-2018-17456 - CVSS 9.8 (critical), 2018-10-06: Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code…
• CVE-2018-11233 - CVSS 7.5 (high), 2018-05-30: In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can…
• CVE-2018-11235 - CVSS 7.8 (high), 2018-05-30: In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a…