agentprime: gitEvery new CVE for git.https://agentprime.io/CVE-2026-100408: Git for Windows: git-credential-wincred Erase Path Heap Overflowhttps://agentprime.io/advisories/CVE-2026-100408/https://agentprime.io/advisories/CVE-2026-100408/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:12:10 GMTCVECVE-2026-100407: Git for Windows: git-credential-wincred OAuth Store Heap Overflowhttps://agentprime.io/advisories/CVE-2026-100407/https://agentprime.io/advisories/CVE-2026-100407/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:07:59 GMTCVECVE-2026-62960: Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windowshttps://agentprime.io/advisories/CVE-2026-62960/https://agentprime.io/advisories/CVE-2026-62960/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 20:05:45 GMTCVECVE-2026-32631: Git for Windows: `git clone` from manipulated repositories can leak NTLM hashes to arbitrary servershttps://agentprime.io/advisories/CVE-2026-32631/https://agentprime.io/advisories/CVE-2026-32631/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Apr 2026 17:26:44 GMTCVECVE-2025-66413: Git for Windows leaks NTLM hash when cloning from an attacker-controlled serverhttps://agentprime.io/advisories/CVE-2025-66413/https://agentprime.io/advisories/CVE-2025-66413/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 20:34:32 GMTCVECVE-2025-48384: Git allows arbitrary code execution through broken config quotinghttps://agentprime.io/advisories/CVE-2025-48384/https://agentprime.io/advisories/CVE-2025-48384/CVSS 8.1 (High). Critical: In CISA’s KEV catalogue since 25 Aug 2025: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 18:23:48 GMTCVEcriticalKEVCVE-2025-48385: Git alllows arbitrary file writes via bundle-uri parameter injectionhttps://agentprime.io/advisories/CVE-2025-48385/https://agentprime.io/advisories/CVE-2025-48385/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 18:23:44 GMTCVECVE-2025-48386: Git allows a buffer overflow in 'wincred' credential helperhttps://agentprime.io/advisories/CVE-2025-48386/https://agentprime.io/advisories/CVE-2025-48386/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 18:23:41 GMTCVECVE-2024-52005: The sideband payload is passed unfiltered to the terminal in githttps://agentprime.io/advisories/CVE-2024-52005/https://agentprime.io/advisories/CVE-2024-52005/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jan 2025 17:35:02 GMTCVECVE-2024-50349: Git does not sanitize URLs when asking for credentials interactivelyhttps://agentprime.io/advisories/CVE-2024-50349/https://agentprime.io/advisories/CVE-2024-50349/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 18:43:42 GMTCVECVE-2024-52006: Newline confusion in credential helpers can lead to credential exfiltration in githttps://agentprime.io/advisories/CVE-2024-52006/https://agentprime.io/advisories/CVE-2024-52006/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 18:39:52 GMTCVECVE-2024-32465: Git's protections for cloning untrusted repositories can be bypassedhttps://agentprime.io/advisories/CVE-2024-32465/https://agentprime.io/advisories/CVE-2024-32465/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 19:18:33 GMTCVECVE-2024-32021: Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directoryhttps://agentprime.io/advisories/CVE-2024-32021/https://agentprime.io/advisories/CVE-2024-32021/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 19:15:28 GMTCVECVE-2024-32020: Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at willhttps://agentprime.io/advisories/CVE-2024-32020/https://agentprime.io/advisories/CVE-2024-32020/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 18:54:08 GMTCVECVE-2024-32004: Git vulnerable to Remote Code Execution while cloning special-crafted local repositorieshttps://agentprime.io/advisories/CVE-2024-32004/https://agentprime.io/advisories/CVE-2024-32004/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 18:46:32 GMTCVECVE-2024-32002: Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Executionhttps://agentprime.io/advisories/CVE-2024-32002/https://agentprime.io/advisories/CVE-2024-32002/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.29 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 18:40:46 GMTCVEcriticalCVE-2023-29012: Git CMD erroneously executes `doskey.exe` in the current directory, if it existshttps://agentprime.io/advisories/CVE-2023-29012/https://agentprime.io/advisories/CVE-2023-29012/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Apr 2023 20:44:05 GMTCVECVE-2023-29011: Git for Windows's config file of `connect.exe` is susceptible to malicious placinghttps://agentprime.io/advisories/CVE-2023-29011/https://agentprime.io/advisories/CVE-2023-29011/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Apr 2023 20:40:30 GMTCVECVE-2023-29007: Arbitrary configuration injection via `git submodule deinit`https://agentprime.io/advisories/CVE-2023-29007/https://agentprime.io/advisories/CVE-2023-29007/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Apr 2023 20:09:52 GMTCVECVE-2023-25815: Git looks for localized messages in the wrong placehttps://agentprime.io/advisories/CVE-2023-25815/https://agentprime.io/advisories/CVE-2023-25815/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Apr 2023 19:51:38 GMTCVECVE-2023-25652: "git apply --reject" partially-controlled arbitrary file writehttps://agentprime.io/advisories/CVE-2023-25652/https://agentprime.io/advisories/CVE-2023-25652/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.52 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Apr 2023 19:17:35 GMTCVEcriticalCVE-2023-22743: Git for Windows' installer is susceptible to DLL side loading attackshttps://agentprime.io/advisories/CVE-2023-22743/https://agentprime.io/advisories/CVE-2023-22743/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Feb 2023 20:39:30 GMTCVECVE-2023-23618: gitk can inadvertently call executables in the worktreehttps://agentprime.io/advisories/CVE-2023-23618/https://agentprime.io/advisories/CVE-2023-23618/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Feb 2023 20:38:04 GMTCVECVE-2023-23946: Git's `git apply` overwriting paths outside the working treehttps://agentprime.io/advisories/CVE-2023-23946/https://agentprime.io/advisories/CVE-2023-23946/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Feb 2023 19:48:00 GMTCVECVE-2023-22490: Git vulnerable to local clone-based data exfiltration with non-local transportshttps://agentprime.io/advisories/CVE-2023-22490/https://agentprime.io/advisories/CVE-2023-22490/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Feb 2023 19:47:56 GMTCVECVE-2022-23521: gitattributes parsing integer overflow in githttps://agentprime.io/advisories/CVE-2022-23521/https://agentprime.io/advisories/CVE-2022-23521/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.56 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jan 2023 22:17:17 GMTCVEcriticalCVE-2022-41903: Integer overflow in `git archive`, `git log --format` leading to RCE in githttps://agentprime.io/advisories/CVE-2022-41903/https://agentprime.io/advisories/CVE-2022-41903/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.44 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jan 2023 22:17:16 GMTCVEcriticalCVE-2022-41953: Git clone remote code execution vulnerability in git-for-windowshttps://agentprime.io/advisories/CVE-2022-41953/https://agentprime.io/advisories/CVE-2022-41953/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jan 2023 21:03:14 GMTCVECVE-2022-39260: Git vulnerable to Remote Code Execution via Heap overflow in `git shell`https://agentprime.io/advisories/CVE-2022-39260/https://agentprime.io/advisories/CVE-2022-39260/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Oct 2022 00:00:00 GMTCVECVE-2022-39253: Git subject to exposure of sensitive information via local clone of symbolic linkshttps://agentprime.io/advisories/CVE-2022-39253/https://agentprime.io/advisories/CVE-2022-39253/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Oct 2022 00:00:00 GMTCVECVE-2022-31012: Git for Windows' installer can be tricked into executing an untrusted binaryhttps://agentprime.io/advisories/CVE-2022-31012/https://agentprime.io/advisories/CVE-2022-31012/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Jul 2022 20:35:15 GMTCVECVE-2022-29187: Bypass of safe.directory protections in Githttps://agentprime.io/advisories/CVE-2022-29187/https://agentprime.io/advisories/CVE-2022-29187/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Jul 2022 00:00:00 GMTCVECVE-2022-24765: Uncontrolled search for the Git directory in Git for Windowshttps://agentprime.io/advisories/CVE-2022-24765/https://agentprime.io/advisories/CVE-2022-24765/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Apr 2022 00:00:00 GMTCVECVE-2021-21300: malicious repositories can execute remote code while cloninghttps://agentprime.io/advisories/CVE-2021-21300/https://agentprime.io/advisories/CVE-2021-21300/CVSS 8.0 (High). Critical: CVSS score 8.0 (7.0 or more) and EPSS 0.89 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Mar 2021 00:00:00 GMTCVEcriticalCVE-2020-11008: Malicious URLs can still cause Git to send a stored credential to the wrong serverhttps://agentprime.io/advisories/CVE-2020-11008/https://agentprime.io/advisories/CVE-2020-11008/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2020 18:40:13 GMTCVECVE-2020-5260: malicious URLs may cause Git to present stored credentials to the wrong serverhttps://agentprime.io/advisories/CVE-2020-5260/https://agentprime.io/advisories/CVE-2020-5260/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Apr 2020 22:50:12 GMTCVEcritical