Iisomorphic-git

Products

Exploited and recent CVEs

• CVE-2026-63395 High 8.8 isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE) 0.7%
• CVE-2026-63475 Medium 4.3 isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS) 0.4%
• CVE-2026-63476 Medium 4.3 isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS) 0.3%
• CVE-2026-63478 Medium 5.3 isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout 0.3%
• CVE-2026-89011 High 7.1 isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfo 0.4%