Read the docs

gitahead

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

gitahead records in CISA KEV

No gitahead vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-69115 CVE-2026-106058 · GHSA-q252-mvpj-37m5

OS command injection in GitAhead via crafted Git filter filenames

Priority HIGH 69

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.01206 Published 2026-10-07 No fix listed CWE-78
TI-2026-69116 CVE-2026-106059 · GHSA-3g7h-c55x-cx2v

Command injection in GitAhead on macOS via Show in Finder

Priority MEDIUM 42

GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.01284 Published 2026-10-07 No fix listed CWE-78
TI-2026-67729 CVE-2026-105295 · GHSA-6xm7-h392-mjvq

Unverified update installation and TLS bypass in GitAhead

Priority LOW 35

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00126 Published 2026-10-05 No fix listed CWE-494
Open these records in search →