Git Vulnerabilities

Source Code Management Tool Vulnerability in Git Software

CVE-2024-52005

GitGit7.5HIGH

Git LFS Credential Vulnerability Affecting Git Extensions from GitHub

CVE-2024-53263

Git-lfsGit-lfs📈8.5HIGH

Credential Exposure in Git by Attacker-Controlled URLs

CVE-2024-50349

GitGit2.1LOW

Vulnerability in Git Credential Helper Affects Multiple Versions

CVE-2024-52006

GitGit2.1LOW

Arbitrary Value Injection Vulnerability in go-git Prior to v5.13

CVE-2025-21613

go-gitGo-git

Git Shallow Clone Vulnerable to Command Injection

CVE-2024-21531

git-shallow-cloneGit-shallow-clone5.3MEDIUM

Git Vulnerability Affects Cloning of Local Repositories

CVE-2024-32465

GitGit7.4HIGH

Git Vulnerability Allows Adversaries to Create Hardlinks to Arbitrary Files

CVE-2024-32021

GitGit3.9LOW

Hardlinking vulnerability in Git prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4

CVE-2024-32020

GitGit3.9LOW

Arbitrary Code Execution Vulnerability in Git Repositories

CVE-2024-32004

GitGit8.2HIGH

Git vulnerability in submodules can be exploited to execute malicious code

CVE-2024-32002

GitGit📈👾🟡EPSS 70%📰9.1CRITICAL

Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

CVE-2023-49569

go-gitgo-git9.8CRITICAL

Maliciously crafted Git server replies can cause DoS on go-git clients

CVE-2023-49568

go-gitgo-git7.5HIGH

Regular Expression Denial of Service in git-urls by 6en6ar

CVE-2023-46402

Git-urls ProjectGit-urls7.5HIGH

Command Injection Vulnerability in Git Commit Info by JPeer264

CVE-2023-26134

Git-commit-info P...Git-commit-info9.8CRITICAL

Regular Expression Denial of Service in git-url-parse for Rust

CVE-2023-33290

Git-url-parse Pro...Git-url-parse7.5HIGH

Git for Windows's config file of `connect.exe` is susceptible to malicious placing

CVE-2023-29011

Git-for-windowsGit7.6HIGH

Arbitrary configuration injection via `git submodule deinit`

CVE-2023-29007

GitGit👾🟡7HIGH

Git CMD erroneously executes `doskey.exe` in the current directory, if it exists

CVE-2023-29012

Git-for-windowsGit7.3HIGH

Git looks for localized messages in the wrong place

CVE-2023-25815

Git-for-windowsGit👾🟡3.3LOW

"git apply --reject" partially-controlled arbitrary file write

CVE-2023-25652

GitGit7.5HIGH

Git for Windows' installer is susceptible to DLL side loading attacks

CVE-2023-22743

Git-for-windowsGit7.3HIGH

gitk can inadvertently call executables in the worktree

CVE-2023-23618

Git-for-windowsGit8.6HIGH

Git Vulnerability: Path Traversal Flaw Affects Multiple Versions

CVE-2023-23946

GitGit📈👾🟡6.2MEDIUM

Git vulnerable to local clone-based data exfiltration with non-local transports

CVE-2023-22490

GitGit👾🟡5.5MEDIUM

git Git Vulnerabilities

Vulnerability Published:

Sort By:

15 January 2025

Source Code Management Tool Vulnerability in Git Software

14 January 2025

Git LFS Credential Vulnerability Affecting Git Extensions from GitHub

Credential Exposure in Git by Attacker-Controlled URLs

Vulnerability in Git Credential Helper Affects Multiple Versions

6 January 2025

Arbitrary Value Injection Vulnerability in go-git Prior to v5.13

1 October 2024

Git Shallow Clone Vulnerable to Command Injection

14 May 2024

Git Vulnerability Affects Cloning of Local Repositories

Git Vulnerability Allows Adversaries to Create Hardlinks to Arbitrary Files

Hardlinking vulnerability in Git prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4

Arbitrary Code Execution Vulnerability in Git Repositories

Git vulnerability in submodules can be exploited to execute malicious code

12 January 2024

Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

Maliciously crafted Git server replies can cause DoS on go-git clients

18 November 2023

Regular Expression Denial of Service in git-urls by 6en6ar

28 June 2023

Command Injection Vulnerability in Git Commit Info by JPeer264

12 June 2023

Regular Expression Denial of Service in git-url-parse for Rust

25 April 2023

Git for Windows's config file of `connect.exe` is susceptible to malicious placing

Arbitrary configuration injection via `git submodule deinit`

Git CMD erroneously executes `doskey.exe` in the current directory, if it exists

Git looks for localized messages in the wrong place

"git apply --reject" partially-controlled arbitrary file write

14 February 2023

Git for Windows' installer is susceptible to DLL side loading attacks

gitk can inadvertently call executables in the worktree

Git Vulnerability: Path Traversal Flaw Affects Multiple Versions

Git vulnerable to local clone-based data exfiltration with non-local transports