GI
Product
git
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 3Low 0
Watch
Add git to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-48384 In wildKEV | 8.0 | Jul 8 | Git allows arbitrary code execution through broken config quoting Affected: < 2.43.7; >= 2.44.0-rc0, < 2.44.4; >= 2.45.0-rc0, < 2.45.4; >= 2.46.0-rc0, < 2.46.4; >= 2.47.0-rc0, < 2.47.3; >= 2.48.0-rc0, < 2.48.2; +2 more |
| CVE-2024-52005 | 8.8 | Jan 15 | Git is a source code management tool Affected: through 2.40.4; 2.41.0 through 2.41.3; 2.42.0 through 2.42.4; 2.43.0 through 2.43.6; 2.44.0 through 2.44.3; 2.45.0 through 2.45.3; +3 more |
| CVE-2022-39260 | 8.8 | Oct 19 | Git vulnerable to Remote Code Execution via Heap overflow in `git shell` Affected: < 2.30.6; > 2.31.0, < 2.31.5; > 2.32.0, < 2.32.4; > 2.33.0, < 2.33.5; > 2.34.0, < 2.34.5; > 2.34.0, < 2.35.5; +2 more |
| CVE-2024-52006 | 7.5 | Jan 14 | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals Affected: before 2.40.4; 2.41.0 before 2.41.3; 2.42.0 before 2.42.4; 2.43.0 before 2.43.6; 2.44.3 before 2.44.3; 2.45.3 before 2.45.3; +3 more |
| CVE-2023-23946 | 7.5 | Feb 14 | Git's `git apply` overwriting paths outside the working tree Affected: >= 2.39.0, < 2.39.2; >= 2.38.0, < 2.38.4; >= 2.37.0, < 2.37.6; >= 2.36.0, < 2.36.5; >= 2.35.0, < 2.35.7; >= 2.34.0, < 2.34.7; +4 more |
| CVE-2020-5260 | 7.5 | Apr 14 | Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker Affected: before 2.17.4; 2.22.0 before 2.22.3 |
Showing 6