Llibgit2

Products

Exploited and recent CVEs

• CVE-2026-53586 Medium 6.5 libgit2: HTTP transport can leak credentials to an offsite redirect target 0.3%
• CVE-2026-53583 Medium 6.5 libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend 0.2%
• CVE-2026-53585 Medium 5.3 libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header 0.4%
• CVE-2026-53587 High 7.5 libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data 0.5%
• CVE-2026-53584 Medium 4.3 libgit2: Submodule path traversal 0.3%
• CVE-2026-5917 High 8.8 libgit2 Shell Command Injection via ssh_libssh2 Backend 1.4%
• CVE-2024-24577 High 8.6 libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add` 1.5%
• CVE-2024-24575 High 7.5 libgit2 is vulnerable to a denial of service attack in `git_revparse_single` 1.4%
• CVE-2023-22742 Medium 5.3 libgit2 fails to verify SSH keys by default 0.6%