git vulnerabilities

CVEs per yearBy the year they were published

1. 20202
2. 20211
3. 20223
4. 20236
5. 20245
6. 20256

Known exploitedNewest addition to KEV first

• CVE-2025-48384

  Git allows arbitrary code execution through broken config quoting

  git · git

  ExploitedHigh8.1

Newest CVEs

• CVE-2025-48384

  Git allows arbitrary code execution through broken config quoting

  git · git

  ExploitedHigh8.1
• CVE-2025-48385

  Git alllows arbitrary file writes via bundle-uri parameter injection

  git · git

  High8.6
• CVE-2025-48386

  Git allows a buffer overflow in 'wincred' credential helper

  git · git

  Medium6.3
• CVE-2024-52005

  The sideband payload is passed unfiltered to the terminal in git

  git · git

  High7.5
• CVE-2024-50349

  Git does not sanitize URLs when asking for credentials interactively

  git · git

  Low2.1
• CVE-2024-52006

  Newline confusion in credential helpers can lead to credential exfiltration in git

  git · git

  Low2.1
• CVE-2024-32465

  Git's protections for cloning untrusted repositories can be bypassed

  git · git

  High7.4
• CVE-2024-32021

  Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory

  git · git

  Low3.9
• CVE-2024-32020

  Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will

  git · git

  Low3.9
• CVE-2024-32004

  Git vulnerable to Remote Code Execution while cloning special-crafted local repositories

  git · git

  High8.2