Login Request a demo
GI
Product
Git
by Git-scm · last CVE Jul 8, 2025
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities41In the news0Timeline
Severity mix
Critical 8High 23Medium 4Low 2
Severity
All severities41Critical8High23Medium4Low2
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Git to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-41903
9.8
44%
Jan 17
Git is distributed revision control system
Affected: through 2.30.6; 2.31.0 through 2.31.5; 2.32.0 through 2.32.4; 2.33.0 through 2.33.5; 2.34.0 through 2.34.5; 2.35.0 through 2.35.5; +4 more
CVE-2022-23521
9.8
56%
Jan 17
Git is distributed revision control system
Affected: through 2.30.6; 2.31.0 through 2.31.5; 2.32.0 through 2.32.4; 2.33.0 through 2.33.5; 2.34.0 through 2.34.5; 2.35.0 through 2.35.5; +4 more
CVE-2014-9390
9.8
76%
Feb 12
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode…
Affected: before 1.8.5.6; 1.9.0 before 1.9.5; 2.0.0 before 2.0.5; 2.1.0 before 2.1.4; 2.2.0 before 2.2.1
CVE-2019-1353
9.8
2%
Jan 24
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6
Affected: 2.14.0 before 2.14.6; 2.15.0 before 2.15.4; 2.16.0 before 2.16.6; 2.17.0 before 2.17.3; 2.18.0 before 2.18.2; 2.19.0 before 2.19.3; +5 more
CVE-2018-19486
9.8
4%
Nov 23
Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and…
Affected: before 2.19.2
CVE-2018-17456
9.8
97%
Oct 6
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing…
Affected: 2.14.0 before 2.14.5; 2.15.0 before 2.15.3; 2.16.0 before 2.16.5; 2.17.0 before 2.17.2; 2.18.0 before 2.18.1; 2.19.0 before 2.19.1
CVE-2016-2324
9.8
18%
Apr 8
Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer…
Affected: through 2.7.3
CVE-2016-2315
9.8
17%
Apr 8
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees,…
Affected: 2.7.3
Showing 8