All 39 CVE vulnerabilities found in Git, with AI-generated Chinese analysis, references, and POCs.
This page aggregates known security vulnerabilities affecting Git, an open-source version control system developed by the Git project. It collects critical weaknesses such as buffer overflows, command injections, and race conditions, covering advisories published from 2005 through the present. Readers can use this resource to track historical and recent vulnerability disclosures specific to the Git codebase. The aggregation allows security teams to understand the evolution of common weakness classes, such as improper input validation or unsafe memory management, directly impacting Git. By reviewing the collected data, organizations can identify recurring patterns in Git vulnerabilities, assess the severity trends over time, and correlate specific weakness types with their potential impact on software supply chains that depend on Git for source code management. This compilation serves as a centralized reference for analyzing how the tool has responded to security incidents across its development history.
Vendor: Microsoft Corporation
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2022-25648 | Command Injection | 8.1 | High | 2022-04-19 |
| CVE-2022-24765 | Uncontrolled search for the Git directory in Git for Windows CWE-427 | 6.0 | Medium | 2022-04-12 |
| CVE-2021-23632 | Remote Code Execution (RCE) | 6.6 | Medium | 2022-03-17 |
| CVE-2021-21300 | malicious repositories can execute remote code while cloning CWE-59 | 8.0 | High | 2021-03-09 |
| CVE-2020-11008 | Malicious URLs can still cause Git to send a stored credential to the wrong server CWE-20 | 4.0 | Medium | 2020-04-21 |
| CVE-2020-5260 | malicious URLs may cause Git to present stored credentials to the wrong server CWE-20 | 9.3 | Critical | 2020-04-14 |
| CVE-2019-1353 | Git 安全漏洞 | 8.4 | - | 2020-01-24 |
| CVE-2019-1348 | Git 输入验证错误漏洞 | 3.3 | - | 2020-01-24 |
| CVE-2019-1387 | Git 输入验证错误漏洞 | 8.8 | - | 2019-12-18 |
All 39 known CVE vulnerabilities affecting Git with full Chinese analysis, references, and POCs where available.