Vulnerabilities

TI-2025-30709 CVE-2025-48384

Git allows arbitrary code execution through broken config quoting

CRITICAL 94KEV

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.

CVSS 3.1HIGH 8.1 Network Low privileges User interaction EPSS 0.04379 Published 2025-07-08 Partial fix · 2.43.7, 2.44.4 +6 CWE-436

TI-2024-21360 CVE-2024-32465

Git's protections for cloning untrusted repositories can be bypassed

LOW 38

Git is a revision control system.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01026 Published 2024-05-14 Partial fix · 2.43.4, 2.42.2 +2 CWE-22

TI-2024-21116 CVE-2024-32021

Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory

MEDIUM 64

Git is a revision control system.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01023 Published 2024-05-14 Partial fix · 2.43.4, 2.42.2 +2 CWE-547

TI-2024-21115 CVE-2024-32020

Cloning local Git repository by untrusted user allows the untrusted user to modify…

LOW 19

Git is a revision control system.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.00519 Published 2024-05-14 Partial fix · 2.43.4, 2.42.2 +2 CWE-281

TI-2024-21103 CVE-2024-32004

Git vulnerable to Remote Code Execution while cloning special-crafted local repositories

MEDIUM 40

Git is a revision control system.

CVSS 3.1HIGH 8.2 Local No auth No interaction EPSS 0.01351 Published 2024-05-14 Partial fix · 2.43.4, 2.42.2 +2 CWE-114

TI-2023-13468 CVE-2023-29007

Arbitrary configuration injection via `git submodule deinit`

MEDIUM 45

Git is a revision control system.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.05609 Published 2023-04-25 Partial fix · 2.30.9, 2.31.8 +9 CWE-74

TI-2023-10933 CVE-2023-25652

"git apply --reject" partially-controlled arbitrary file write

HIGH 71

Git is a revision control system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.51883 Published 2023-04-25 Partial fix · 2.30.9, 2.31.8 +9 CWE-22

TI-2023-09743 CVE-2023-23946

Git's `git apply` overwriting paths outside the working tree

MEDIUM 41

Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01135 Published 2023-02-14 Partial fix · 2.39.2, 2.38.4 +8 CWE-22

TI-2023-08739 CVE-2023-22490

Git vulnerable to local clone-based data exfiltration with non-local transports

LOW 26

Git is a revision control system.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0071 Published 2023-02-14 Partial fix · 2.39.2, 2.38.4 +8 CWE-59

TI-2022-07580 CVE-2022-23521

gitattributes parsing integer overflow in git

HIGH 82

Git is distributed revision control system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.56334 Published 2023-01-17 Partial fix · 2.30.7, 2.31.6 +7 CWE-190

TI-2022-20244 CVE-2022-41903

Integer overflow in `git archive`, `git log --format` leading to RCE in git

HIGH 78

Git is distributed revision control system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44268 Published 2023-01-17 Partial fix · 2.30.7, 2.31.6 +7 CWE-190

TI-2022-20294 CVE-2022-41953

Git clone remote code execution vulnerability in git-for-windows

MEDIUM 50

Git GUI is a convenient graphical tool that comes with Git for Windows.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.08038 Published 2023-01-17 Fixed in 2.39.1 CWE-426

TI-2022-18636 CVE-2022-39260

Git vulnerable to Remote Code Execution via Heap overflow in `git shell`

MEDIUM 45

Git is an open source, scalable, distributed revision control system.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03987 Published 2022-10-19 Partial fix · 2.30.6 CWE-122

TI-2022-18629 CVE-2022-39253

Git subject to exposure of sensitive information via local clone of symbolic links

LOW 28

Git is an open source, scalable, distributed revision control system.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01481 Published 2022-10-19 Partial fix · 2.30.6, 2.31.5 +6 CWE-200

TI-2022-11730 CVE-2022-29187

Bypass of safe.directory protections in Git

LOW 34

Git is a distributed revision control system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00446 Published 2022-07-12 Partial fix · 2.30.5, 2.31.4 +6 CWE-282

TI-2022-08579 CVE-2022-24765

Uncontrolled search for the Git directory in Git for Windows

LOW 38

Git for Windows is a fork of Git containing Windows-specific patches.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0101 Published 2022-04-12 Partial fix · 2.35.2 CWE-427

TI-2022-08769 CVE-2022-24975 · GHSA-wx8f-p63x-543f

The --mirror documentation for Git through 2.35.1 does not mention the availability of…

LOW 38

The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02624 Published 2022-02-11 No fix listed CWE-668

TI-2021-17403 CVE-2021-40330 · GHSA-8r9w-64qj-m6cj

git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a…

LOW 38

git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aG…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02874 Published 2021-08-31 Will not fix

TI-2021-04400 CVE-2021-21300

malicious repositories can execute remote code while cloning

HIGH 77

Git is an open-source distributed revision control system.

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.88533 Published 2021-03-09 Partial fix · 2.17.62.17.6, 2.18.5 +12 CWE-59

TI-2020-08882 CVE-2020-11008

Malicious URLs can still cause Git to send a stored credential to the wrong server

LOW 39

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03867 Published 2020-04-21 Fixed in 2.17.5, 2.18.4 +7 CWE-20

TI-2020-04316 CVE-2020-5260

malicious URLs may cause Git to present stored credentials to the wrong server

MEDIUM 56

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.14887 Published 2020-04-14 Fixed in 2.17.4, 2.18.3 +7 CWE-20

TI-2014-07619 CVE-2014-9390 · GHSA-6vvc-c2m3-cjf3

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x…

HIGH 81

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions bef…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.75597 Published 2020-02-12 Fixed in 3.5.3, 3.2.3 CWE-20

TI-2019-01067 CVE-2019-1353

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3…

MEDIUM 46

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02306 Published 2020-01-24 No fix listed

TI-2019-01062 CVE-2019-1348

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3…

LOW 16

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00427 Published 2020-01-24 Partial fix

TI-2019-01097 CVE-2019-1387 · GHSA-9mhc-h3vf-83fw

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3…

MEDIUM 47

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04426 Published 2019-12-18 Fixed in v2.24.1, v2.23.1 +9

Vulnerabilities

Filters