Libgit2 - vulnerabilities (CVEs)
17 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-20.
Products
- Libgit2 - 12 CVEs
Newest CVEs of Libgit2
- CVE-2026-53586 - CVSS 6.5 (medium), 2026-08-20: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your…
- CVE-2026-53583 - CVSS 6.5 (medium), 2026-08-20: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your…
- CVE-2026-53585 - CVSS 5.3 (medium), 2026-08-20: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your…
- CVE-2026-53587 - CVSS 7.5 (high), 2026-08-20: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your…
- CVE-2026-53584 - CVSS 4.3 (medium), 2026-08-20: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your…
- CVE-2026-5917 - CVSS 8.8 (high), 2026-08-11: libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerability that…
- CVE-2024-24577 - CVSS 9.8 (critical), 2024-02-06: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your…
- CVE-2024-24575 - CVSS 7.5 (high), 2024-02-06: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your…
- CVE-2023-22742 - CVSS 5.9 (medium), 2023-01-20: libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform…
- CVE-2020-12278 - CVSS 9.8 (critical), 2020-04-27: An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data…
- CVE-2020-12279 - CVSS 9.8 (critical), 2020-04-27: An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names.…
- CVE-2014-9390 - CVSS 9.8 (critical), 2020-02-12: Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows…
- CVE-2018-15501 - CVSS 7.5 (high), 2018-08-18: In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that…
- CVE-2018-10888 - CVSS 6.5 (medium), 2018-07-10: A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading…
- CVE-2018-10887 - CVSS 8.1 (high), 2018-07-10: A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may…
- CVE-2018-8099 - CVSS 6.5 (medium), 2018-03-14: Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause…
- CVE-2018-8098 - CVSS 6.5 (medium), 2018-03-14: Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a…
