libgit2 vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 20231
3. 20242
4. 20266

Newest CVEs

• CVE-2026-53586

  libgit2: HTTP transport can leak credentials to an offsite redirect target

  libgit2 · libgit2

  Medium6.5
• CVE-2026-53583

  libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend

  libgit2 · libgit2

  Medium6.5
• CVE-2026-53585

  libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header

  libgit2 · libgit2

  Medium5.3
• CVE-2026-53587

  libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data

  libgit2 · libgit2

  High7.5
• CVE-2026-53584

  libgit2: Submodule path traversal

  libgit2 · libgit2

  Medium4.3
• CVE-2026-5917

  libgit2 Shell Command Injection via ssh_libssh2 Backend

  libgit2 · libgit2

  High8.6
• CVE-2024-24577

  libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`

  libgit2 · libgit2

  High8.6
• CVE-2024-24575

  libgit2 is vulnerable to a denial of service attack in `git_revparse_single`

  libgit2 · libgit2

  High7.5
• CVE-2023-22742

  libgit2 fails to verify SSH keys by default

  libgit2 · libgit2

  Medium5.3
• CVE-2018-10888

  A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading…

  libgit2 · libgit2

  Medium6.5