Isomorphic-git - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2026-09-10.

Products

• Cors-proxy - 1 CVEs
• Isomorphic-git - 1 CVEs

Newest CVEs of Isomorphic-git

• CVE-2026-89011 - CVSS 7.1 (high), 2026-09-10: isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a malicious Git server operator to pollute…
• CVE-2021-23664 - CVSS 8.6 (high), 2022-01-21: The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the…
• CVE-2021-30483 - CVSS 5.3 (medium), 2021-07-30: isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.