Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: gitahead Clear all filters
TI-2026-69116 CVE-2026-106059 · GHSA-3g7h-c55x-cx2v

Command injection in GitAhead on macOS via Show in Finder

Priority MEDIUM 42

GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.01284 Published 2026-10-07 No fix listed CWE-78
TI-2026-69115 CVE-2026-106058 · GHSA-q252-mvpj-37m5

OS command injection in GitAhead via crafted Git filter filenames

Priority HIGH 69

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.01206 Published 2026-10-07 No fix listed CWE-78
TI-2026-67729 CVE-2026-105295 · GHSA-6xm7-h392-mjvq

Unverified update installation and TLS bypass in GitAhead

Priority LOW 35

GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00126 Published 2026-10-05 No fix listed CWE-494