Libgit2 vulnerabilities

Products

• Libgit2 17

Newest

• libgit2 libgit2 Shell Command Injection via ssh_libssh2 Backend CVE-2026-5917 Fix available 8.6 HighAugust 11, 2026
• libgit2 libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data CVE-2026-53587 Public exploitFix available 7.5 HighJuly 20, 2026
• libgit2 libgit2: HTTP transport can leak credentials to an offsite redirect target CVE-2026-53586 Fix available 6.5 MediumJuly 20, 2026
• libgit2 libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header CVE-2026-53585 Fix available 5.3 MediumJuly 20, 2026
• libgit2 libgit2: Submodule path traversal CVE-2026-53584 Fix available 4.3 MediumJuly 20, 2026
• libgit2 libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend CVE-2026-53583 Fix available 6.5 MediumJuly 20, 2026
• libgit2 libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add` CVE-2024-24577 Fix available 8.6 HighFebruary 6, 2024
• libgit2 libgit2 is vulnerable to a denial of service attack in `git_revparse_single` CVE-2024-24575 Fix available 7.5 HighFebruary 6, 2024
• libgit2 libgit2 fails to verify SSH keys by default CVE-2023-22742 Fix available 5.3 MediumJanuary 20, 2023
• libgit2, debian linux +1 more An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles... CVE-2020-12279 Fix available 9.8 CriticalApril 27, 2020
• libgit2, debian linux +1 more An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles... CVE-2020-12278 Fix available 9.8 CriticalApril 27, 2020
• libgit2, debian linux +1 more In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote... CVE-2018-15501 Fix available 7.5 HighAugust 18, 2018
• libgit2, debian linux +1 more A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in... CVE-2018-10888 Fix available 6.5 MediumJuly 10, 2018
• libgit2, debian linux +1 more A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign... CVE-2018-10887 Fix available 8.1 HighJuly 10, 2018
• libgit2, debian linux +1 more Incorrect returning of an error code in the index.c:read_entry() function leads to a double free... CVE-2018-8099 Fix available 6.5 MediumMarch 14, 2018
• libgit2, debian linux +1 more Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix... CVE-2018-8098 Fix available 6.5 MediumMarch 14, 2018
• apple xcode, eclipse egit, jgit +3 more +5 more JGit Improper Input Validation vulnerability CVE-2014-9390 Public exploitFix available EPSS 75.6% 9.8 CriticalDecember 19, 2014