git

Products

Exploited and recent CVEs

• CVE-2025-48384 High 8.1 Exploited Git allows arbitrary code execution through broken config quoting 4.4%
• CVE-2025-48385 High 8.6 Git alllows arbitrary file writes via bundle-uri parameter injection 1.1%
• CVE-2025-48386 Medium 6.3 Git allows a buffer overflow in 'wincred' credential helper 0.4%
• CVE-2024-52005 High 7.5 The sideband payload is passed unfiltered to the terminal in git 0.5%
• CVE-2024-50349 Low 2.1 Git does not sanitize URLs when asking for credentials interactively 0.7%
• CVE-2024-52006 Low 2.1 Newline confusion in credential helpers can lead to credential exfiltration in git 1.0%
• CVE-2024-32465 High 7.4 Git's protections for cloning untrusted repositories can be bypassed 1.0%
• CVE-2024-32021 Low 3.9 Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory 1.0%
• CVE-2024-32020 Low 3.9 Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will 0.5%
• CVE-2024-32004 High 8.2 Git vulnerable to Remote Code Execution while cloning special-crafted local repositories 1.4%
• CVE-2024-32002 Critical 9.1 Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution 29.2%
• CVE-2023-29007 High 7.0 Arbitrary configuration injection via `git submodule deinit` 5.6%
• CVE-2023-25652 High 7.5 "git apply --reject" partially-controlled arbitrary file write 51.9%
• CVE-2023-23946 Medium 6.2 Git's `git apply` overwriting paths outside the working tree 1.1%
• CVE-2023-22490 Medium 5.5 Git vulnerable to local clone-based data exfiltration with non-local transports 0.7%
• CVE-2022-23521 Critical 9.8 gitattributes parsing integer overflow in git 56.3%
• CVE-2022-41903 Critical 9.8 Integer overflow in `git archive`, `git log --format` leading to RCE in git 44.3%
• CVE-2022-39260 High 8.5 Git vulnerable to Remote Code Execution via Heap overflow in `git shell` 4.0%
• CVE-2022-39253 Medium 5.5 Git subject to exposure of sensitive information via local clone of symbolic links 1.5%
• CVE-2022-29187 High 7.8 Bypass of safe.directory protections in Git 0.4%
• CVE-2021-21300 High 8.0 malicious repositories can execute remote code while cloning 88.5%
• CVE-2020-11008 Medium 4.0 Malicious URLs can still cause Git to send a stored credential to the wrong server 3.9%
• CVE-2020-5260 Critical 9.3 malicious URLs may cause Git to present stored credentials to the wrong server 14.9%