Skip to content

git vulnerabilities (Alpine)

44 vulnerabilities.

git Alpine Git GUI malicious command injection on Windows CVE-2025-46334 Fix available 8.6 HighJuly 10, 2025
git Alpine Git allows a buffer overflow in 'wincred' credential helper CVE-2025-48386 Fix available 6.3 MediumJuly 8, 2025
git Alpine Git alllows arbitrary file writes via bundle-uri parameter injection CVE-2025-48385 Fix available 8.6 HighJuly 8, 2025
git Alpine Git allows arbitrary code execution through broken config quoting CVE-2025-48384 In KEVPublic exploitFix available 8.1 HighJuly 8, 2025
git Alpine Git GUI can create and overwrite files for which the user has write permission CVE-2025-46835 Fix available 8.5 HighJuly 8, 2025
git Alpine Gitk allows arbitrary command execution CVE-2025-27614 Fix available 8.6 HighJuly 8, 2025
git Alpine Gitk can create and truncate files in the user's home directory CVE-2025-27613 Fix available 3.6 LowJuly 8, 2025
git Alpine Newline confusion in credential helpers can lead to credential exfiltration in git CVE-2024-52006 Fix available 2.1 LowJanuary 14, 2025
git Alpine Git does not sanitize URLs when asking for credentials interactively CVE-2024-50349 Fix available 2.1 LowJanuary 14, 2025
git Alpine Git's protections for cloning untrusted repositories can be bypassed CVE-2024-32465 Fix available 7.4 HighMay 14, 2024
git Alpine Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory CVE-2024-32021 Fix available 3.9 LowMay 14, 2024
git Alpine Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will CVE-2024-32020 Fix available 3.9 LowMay 14, 2024
git Alpine Git vulnerable to Remote Code Execution while cloning special-crafted local repositories CVE-2024-32004 Public exploitFix available 8.2 HighMay 14, 2024
git Alpine Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution CVE-2024-32002 Public exploitFix available EPSS 29.2% 9.1 CriticalMay 14, 2024
git Alpine Arbitrary configuration injection via `git submodule deinit` CVE-2023-29007 Public exploitFix available 7.0 HighApril 25, 2023
git Alpine Git looks for localized messages in the wrong place CVE-2023-25815 Fix available 3.3 LowApril 25, 2023
git Alpine "git apply --reject" partially-controlled arbitrary file write CVE-2023-25652 Fix available EPSS 51.9% 7.5 HighApril 25, 2023
git Alpine Git's `git apply` overwriting paths outside the working tree CVE-2023-23946 Public exploitFix available 6.2 MediumFebruary 14, 2023
git Alpine Git vulnerable to local clone-based data exfiltration with non-local transports CVE-2023-22490 Public exploitFix available 5.5 MediumFebruary 14, 2023
git Alpine Integer overflow in `git archive`, `git log --format` leading to RCE in git CVE-2022-41903 Public exploitFix available EPSS 44.3% 9.8 CriticalJanuary 17, 2023
git Alpine gitattributes parsing integer overflow in git CVE-2022-23521 Fix available EPSS 56.3% 9.8 CriticalJanuary 17, 2023
git Alpine Git vulnerable to Remote Code Execution via Heap overflow in `git shell` CVE-2022-39260 Fix available 8.5 HighOctober 18, 2022
git Alpine Git subject to exposure of sensitive information via local clone of symbolic links CVE-2022-39253 Public exploitFix available 5.5 MediumOctober 18, 2022
git Alpine Bypass of safe.directory protections in Git CVE-2022-29187 Fix available 7.8 HighJuly 12, 2022
git Alpine Uncontrolled search for the Git directory in Git for Windows CVE-2022-24765 Fix available 6.0 MediumApril 12, 2022
git Alpine git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline... CVE-2021-40330 Fix available 7.5 HighAugust 31, 2021
git Alpine malicious repositories can execute remote code while cloning CVE-2021-21300 Public exploitFix available EPSS 88.5% 8.0 HighMarch 9, 2021
git Alpine Malicious URLs can still cause Git to send a stored credential to the wrong server CVE-2020-11008 Fix available 4.0 MediumApril 20, 2020
git Alpine malicious URLs may cause Git to present stored credentials to the wrong server CVE-2020-5260 Public exploitFix available EPSS 14.9% 9.3 CriticalApril 14, 2020
git Alpine Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before... CVE-2019-19604 Fix available 7.8 HighDecember 10, 2019
git Alpine A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes... CVE-2019-1354 Fix available EPSS 22.6% 8.8 HighDecember 10, 2019
git Alpine A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive... CVE-2019-1351 Public exploitFix available 7.5 HighDecember 10, 2019
git Alpine A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes... CVE-2019-1350 Fix available EPSS 25.7% 8.8 HighDecember 10, 2019
git Alpine An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2,... CVE-2019-1387 Fix available 8.8 HighDecember 10, 2019
git Alpine CVE-2019-1353 does not affect BellSoft software CVE-2019-1353 Fix available 9.8 CriticalDecember 10, 2019
git Alpine A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes... CVE-2019-1352 Fix available EPSS 24.0% 8.8 HighDecember 10, 2019
git Alpine A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes... CVE-2019-1349 Fix available EPSS 34.0% 8.8 HighDecember 10, 2019
git Alpine CVE-2019-1348 does not affect BellSoft software CVE-2019-1348 Fix available 3.3 LowDecember 10, 2019
git Alpine Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '... CVE-2018-19486 Fix available 9.8 CriticalNovember 23, 2018
git Alpine Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x... CVE-2018-17456 Public exploitFix available EPSS 97.4% 9.8 CriticalOctober 5, 2018
git Alpine In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17... CVE-2018-11233 Fix available 7.5 HighMay 30, 2018
git Alpine In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17... CVE-2018-11235 Public exploitFix available EPSS 48.1% 7.8 HighMay 29, 2018
git Alpine A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an... CVE-2017-1000117 Public exploitFix available EPSS 77.8% 8.8 HighAugust 10, 2017
git Alpine git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x... CVE-2017-8386 Public exploitFix available EPSS 12.4% 8.8 HighMay 10, 2017