Advisories · Technology
isomorphic-git.
Every CVE that names isomorphic-git among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)
- isomorphic-git
- Path traversal
- CVSS 4.3 Medium
isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
- isomorphic-git
- Denial of service
- CVSS 4.3 Medium
isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)
- isomorphic-git
- Denial of service
- CVSS 5.3 Medium
isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout
- isomorphic-git
- Path traversal
- CVSS 7.1 High
isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfo
- isomorphic-git
- Prototype pollution