Git güvenlik açıkları

Git Git için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

RSS akışı
Toplam CVE24
Son 30 gün0
Kritik4
Aktif istismar1
24 sonuç
6.3Orta
CVE-2025-48386

Git allows a buffer overflow in 'wincred' credential helper

git git

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as a unique key for storing and …

7.0Yüksek
CVE-2023-29007

Arbitrary configuration injection via `git submodule deinit`

git git

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit…

5.6%EPSS
7.5Yüksek
CVE-2023-25652

"git apply --reject" partially-controlled arbitrary file write

git git

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with…

52%EPSS
6.2Orta
CVE-2023-23946

Git's `git apply` overwriting paths outside the working tree

git git

Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a path outside the working tree can be overwritten…

1.1%EPSS
9.8Kritik
CVE-2022-23521

gitattributes parsing integer overflow in git

git git

Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes tha…

56%EPSS
7.8Yüksek
CVE-2022-29187

Bypass of safe.directory protections in Git

git git

Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported …

8.0Yüksek
CVE-2021-21300

malicious repositories can execute remote code while cloning

git git

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed w…

89%EPSS
Puansız
CVE-2019-1387
Microsoft Corporation Git; git git

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowin…

4.4%EPSS

Liste 2025 başından bu yana tüm kayıtları ve bu ürün için daha eski kayıtları içerir.