Login Request a demo
SO
Product
Sourcetree
by Atlassian · last CVE Jul 21, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 2High 14Medium 0Low 0
Severity
All severities16Critical2High14Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sourcetree to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-13385
9.8
2%
Jul 24
There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories
Affected: 1.0 before 2.7.6; 1.0; 1.0; 1.0; 1.0; 1.0
CVE-2017-8768
9.8
8%
May 4
Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme
Affected: through 2.5c
Showing 2