- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2025-48384Git allows arbitrary code execution through broken config quoting | Exploitation statusKEV | FixYes | Affected productgit | Published07/08/2025 | SeverityHigh |
CVE-2025-48385Git alllows arbitrary file writes via bundle-uri parameter injection | Exploitation statusNot known exploited | FixYes | Affected productgit | Published07/08/2025 | SeverityHigh |
CVE-2025-48386Git allows a buffer overflow in 'wincred' credential helper | Exploitation statusNot known exploited | FixYes | Affected productgit | Published07/08/2025 | SeverityMedium |
CVE-2024-52005The sideband payload is passed unfiltered to the terminal in git | Exploitation statusNot known exploited | FixNot confirmed | Affected productgit | Published01/15/2025 | SeverityHigh |
CVE-2024-50349Git does not sanitize URLs when asking for credentials interactively | Exploitation statusNot known exploited | FixNot confirmed | Affected productgit | Published01/14/2025 | SeverityLow |
CVE-2024-52006Newline confusion in credential helpers can lead to credential exfiltration in git | Exploitation statusNot known exploited | FixNot confirmed | Affected productgit | Published01/14/2025 | SeverityLow |
CVE-2024-32465Git's protections for cloning untrusted repositories can be bypassed | Exploitation statusNot known exploited | FixYes | Affected productgit | Published05/14/2024 | SeverityHigh |
CVE-2024-32021Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory | Exploitation statusPublic exploit | FixYes | Affected productgit | Published05/14/2024 | SeverityLow |
CVE-2024-32020Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will | Exploitation statusNot known exploited | FixYes | Affected productgit | Published05/14/2024 | SeverityLow |
CVE-2024-32004Git vulnerable to Remote Code Execution while cloning special-crafted local repositories | Exploitation statusNot known exploited | FixYes | Affected productgit | Published05/14/2024 | SeverityHigh |
CVE-2024-32002Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution | Exploitation statusPublic exploit | FixYes | Affected productgit | Published05/14/2024 | SeverityCritical |
CVE-2023-29007Arbitrary configuration injection via `git submodule deinit` | Exploitation statusNot confirmed | FixYes | Affected productgit | Published04/25/2023 | SeverityHigh |
CVE-2023-25652"git apply --reject" partially-controlled arbitrary file write | Exploitation statusNot known exploited | FixYes | Affected productgit | Published04/25/2023 | SeverityHigh |
CVE-2023-23946Git's `git apply` overwriting paths outside the working tree | Exploitation statusNot confirmed | FixNot confirmed | Affected productgit | Published02/14/2023 | SeverityMedium |
CVE-2023-22490Git vulnerable to local clone-based data exfiltration with non-local transports | Exploitation statusNot confirmed | FixNot confirmed | Affected productgit | Published02/14/2023 | SeverityMedium |
CVE-2022-23521gitattributes parsing integer overflow in git | Exploitation statusNot known exploited | FixYes | Affected productgit | Published01/17/2023 | SeverityCritical |
CVE-2022-41903Integer overflow in `git archive`, `git log --format` leading to RCE in git | Exploitation statusNot known exploited | FixYes | Affected productgit | Published01/17/2023 | SeverityCritical |
CVE-2022-39260Git vulnerable to Remote Code Execution via Heap overflow in `git shell` | Exploitation statusNot confirmed | FixYes | Affected productgit | Published10/19/2022 | SeverityHigh |
CVE-2022-39253Git subject to exposure of sensitive information via local clone of symbolic links | Exploitation statusNot confirmed | FixYes | Affected productgit | Published10/19/2022 | SeverityMedium |
CVE-2022-29187Bypass of safe.directory protections in Git | Exploitation statusNot confirmed | FixNot confirmed | Affected productgit | Published07/12/2022 | SeverityHigh |
CVE-2022-25648Command Injection | Exploitation statusNot confirmed | FixYes | Affected productgit | Published04/19/2022 | SeverityHigh |
CVE-2021-21300malicious repositories can execute remote code while cloning | Exploitation statusNot confirmed | FixYes | Affected productgit | Published03/09/2021 | SeverityHigh |
CVE-2020-11008Malicious URLs can still cause Git to send a stored credential to the wrong server | Exploitation statusNot confirmed | FixNot confirmed | Affected productgit | Published04/21/2020 | SeverityMedium |
CVE-2020-5260malicious URLs may cause Git to present stored credentials to the wrong server | Exploitation statusNot confirmed | FixYes | Affected productgit | Published04/14/2020 | SeverityCritical |
CVE-2017-8386 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/01/2017 | SeverityUnknown |
CVE-2010-3906 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published12/17/2010 | SeverityUnknown |
CVE-2009-2108 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/18/2009 | SeverityUnknown |
CVE-2008-5916 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/21/2009 | SeverityUnknown |
CVE-2008-5516 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/20/2009 | SeverityUnknown |
CVE-2008-5517 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/13/2009 | SeverityUnknown |
CVE-2008-3546 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/07/2008 | SeverityUnknown |
CVE-2006-0477 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/31/2006 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan