Advisories · Technology
libgit2.
Every CVE that names libgit2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
libgit2: HTTP transport can leak credentials to an offsite redirect target
- libgit2
- Information disclosure
- Hard-coded credentials
- CVSS 6.5 Medium
libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend
- libgit2
- Weak cryptography or TLS
- CVSS 5.3 Medium
libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header
- libgit2
- Denial of service
- CVSS 7.5 High
libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data
- libgit2
- Memory corruption
- CWE-20
- CVSS 4.3 Medium
libgit2: Submodule path traversal
- libgit2
- Path traversal
- CVSS 8.6 High
libgit2 Shell Command Injection via ssh_libssh2 Backend
- libgit2
- Command injection
- CVSS 8.6 High
libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`
- libgit2
- Memory corruption
- CVSS 7.5 High
libgit2 is vulnerable to a denial of service attack in `git_revparse_single`
- libgit2
- Denial of service
-
Improper input validation in libgit2
- libgit2
- CWE-20
-
A flaw was found in libgit2 before version 0.27.3.
- libgit2
- CWE-194