Login Request a demo
GI
Product
Git
by Git-scm · last CVE Jul 8, 2025
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities41In the news0Timeline
Severity mix
Critical 8High 23Medium 4Low 2
Severity
All severities41Critical8High23Medium4Low2
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Git to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-22490
5.5
1%
Feb 14
Git vulnerable to local clone-based data exfiltration with non-local transports
Affected: before 2.30.8; 2.31.0 before 2.31.7; 2.32.0 before 2.32.6; 2.33.0 before 2.33.7; 2.34.0 before 2.34.7; 2.35.0 before 2.35.7; +4 more
CVE-2022-39253
5.5
1%
Oct 19
Git subject to exposure of sensitive information via local clone of symbolic links
Affected: before 2.30.6; 2.31.0 before 2.31.5; 2.32.0 before 2.32.4; 2.33.0 before 2.33.5; 2.34.0 before 2.34.5; 2.35.0 before 2.35.5; +3 more
CVE-2017-15298
5.5
2%
Oct 14
Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a Git bomb
Affected: through 2.14.2
CVE-2018-1000021
5.0
1%
Feb 9
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE
Affected: through 2.15.1
Showing 4