libgit2 — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in libgit2, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-53586	libgit2: HTTP transport can leak credentials to an offsite redirect target CWE-200	6.5	Medium	2026-08-20
CVE-2026-53583	libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend CWE-295	6.5	Medium	2026-08-20
CVE-2026-53585	libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header CWE-770	5.3	Medium	2026-08-20
CVE-2026-53587	libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data CWE-20	7.5	High	2026-08-20
CVE-2026-53584	libgit2: Submodule path traversal CWE-22	4.3	Medium	2026-08-20
CVE-2026-5917	libgit2 v0.27.0-v1.9.0 Shell Command Injection via ssh_libssh2 Backend CWE-78	9.6	Critical	2026-08-11
CVE-2024-24577	libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add` CWE-122	8.6	High	2024-02-06
CVE-2024-24575	libgit2 is vulnerable to a denial of service attack in `git_revparse_single` CWE-400	7.5	High	2024-02-06
CVE-2023-22742	libgit2 fails to verify SSH keys by default CWE-347	5.3	Medium	2023-01-20
CVE-2018-10887	libgit2 数字错误漏洞 CWE-194	8.1	-	2018-07-10
CVE-2018-10888	libgit2 安全漏洞 CWE-20	6.5	-	2018-07-10

All 11 known CVE vulnerabilities affecting libgit2 with full Chinese analysis, references, and POCs where available.