Priority HIGH 73
isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.
isomorphic-git
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
isomorphic-git records in CISA KEVNo isomorphic-git vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2026-84492 CVE-2026-63478
isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout
Priority MEDIUM 57
isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.
Priority MEDIUM 53
isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.
Priority MEDIUM 53
isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.
TI-2021-06178 CVE-2021-23664 · GHSA-v82v-rq72-phq9
Server-side request forgery (SSRF) in @isomorphic-git/cors-proxy
Priority MEDIUM 40
The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.
Priority LOW 38
isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a malicious Git server operator to pollute Object.prototype by advertising crafted ref names containing…
TI-2021-10885 CVE-2021-30483 · GHSA-fgxq-p49f-qw99
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.
Priority LOW 28
isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.