g
git
Security Risk Profile
52
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 54 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 31, 2006 to present
54
Total CVEs
24
Critical+High
2
Exploited
15
Unpatched
Threat Assessment
Avg CVSS
5.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
15
Critical/High
Risk Level
52/100
medium
⚠️ 2 Active Exploits📈 1 in Last 30 Days
Severity Distribution
Critical
3High
21Medium
11Low
8Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Command Injection
3
2
Buffer Overflow
3
3
OS Command Injection
2
4
Path Traversal
2
5
Integer Overflow
2
Most Affected Products
1. Git Git457
2. Git git243
3. git-scm Git28
4. alpine/git22
5. debian/git17
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q4/393
unknown
Brotli CVE-2026-111497 and git-mote-https
Oct 26, 2026🔧 No Patch
CVE-2026-19592
CVSS 7.3high
Sep 1, 2026🔧 No Patch
CVE-2026-62960
CVSS 7.4high
Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows
Aug 21, 2026🔧 No Patch
CVE-2025-26625
CVSS 8.6high
Git LFS may write to arbitrary files via crafted symlinks
Oct 17, 2025
https://reddit.com/r/cybersecurity/comments/1n11npa/organizations_warned_of_exploited_git/
unknown
Organizations Warned of Exploited Git Vulnerability
Aug 26, 2025🔧 No Patch
https://reddit.com/r/cybersecurity/comments/1n0v4zc/git_vulnerability_leading_to_rce_is_being/
unknown
Git vulnerability leading to RCE is being exploited by attackers
Aug 26, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-git-code-execution-flaw/
unknown
CISA warns of actively exploited Git code execution flaw
Aug 26, 2025⚠ Exploited🔧 No Patch
REDHAT-BUG-2379326
CVSS 1.0low
Jul 10, 2025🔧 No Patch
GHSA-g4v5-fjv9-mhhc
CVSS 8.6high
Gitk allows arbitrary command execution
Jul 10, 2025🔧 No Patch
REDHAT-BUG-2379125
CVSS 4.0medium
Jul 9, 2025🔧 No Patch
Monitor git in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.