git.

Git for Windows: git-credential-wincred Erase Path Heap Overflow

• git
• Memory corruption

Git for Windows: git-credential-wincred OAuth Store Heap Overflow

• git
• Memory corruption

Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows

• git
• Information disclosure
• CWE-610

Git for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary servers

• git
• Information disclosure

Git for Windows leaks NTLM hash when cloning from an attacker-controlled server

• git
• Information disclosure

Git allows arbitrary code execution through broken config quoting

• git
• Path traversal
• CWE-436

Git alllows arbitrary file writes via bundle-uri parameter injection

• git
• Path traversal
• Command injection

Git allows a buffer overflow in 'wincred' credential helper

• git
• Memory corruption

The sideband payload is passed unfiltered to the terminal in git

• git
• CWE-116
• CWE-150

Git does not sanitize URLs when asking for credentials interactively

• git
• CWE-116
• CWE-147

Newline confusion in credential helpers can lead to credential exfiltration in git

• git
• CWE-116
• CWE-147

Git's protections for cloning untrusted repositories can be bypassed

• git
• Path traversal

Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory

• git
• CWE-547

Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will

• git
• CWE-281

Git vulnerable to Remote Code Execution while cloning special-crafted local repositories

• git
• CWE-114

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

• git
• Path traversal
• Unrestricted file upload

Git CMD erroneously executes `doskey.exe` in the current directory, if it exists

• git
• CWE-427

Git for Windows's config file of `connect.exe` is susceptible to malicious placing

• git
• CWE-427

Arbitrary configuration injection via `git submodule deinit`

• git
• Other injection

Git looks for localized messages in the wrong place

• git
• Path traversal
• Memory corruption

"git apply --reject" partially-controlled arbitrary file write

• git
• Path traversal

Git for Windows' installer is susceptible to DLL side loading attacks

• git
• CWE-426

gitk can inadvertently call executables in the worktree

• git
• CWE-426

Git's `git apply` overwriting paths outside the working tree

• git
• Path traversal

Git vulnerable to local clone-based data exfiltration with non-local transports

• git
• Path traversal

gitattributes parsing integer overflow in git

• git
• Memory corruption

Integer overflow in `git archive`, `git log --format` leading to RCE in git

• git
• Memory corruption

Git clone remote code execution vulnerability in git-for-windows

• git
• CWE-426

Git vulnerable to Remote Code Execution via Heap overflow in `git shell`

• git
• Memory corruption

Git subject to exposure of sensitive information via local clone of symbolic links

• git
• Information disclosure

Git for Windows' installer can be tricked into executing an untrusted binary

• git
• CWE-426

Bypass of safe.directory protections in Git

• git
• CWE-282
• CWE-427

Uncontrolled search for the Git directory in Git for Windows

• git
• CWE-427

malicious repositories can execute remote code while cloning

• git
• Path traversal

Malicious URLs can still cause Git to send a stored credential to the wrong server

• git
• CWE-20

malicious URLs may cause Git to present stored credentials to the wrong server

• git
• CWE-20