g
git
Security Risk Profile
51
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 46 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 31, 2006 to present
46
Total CVEs
18
Critical+High
3
Exploited
10
Unpatched
Threat Assessment
Avg CVSS
5.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
10
Critical/High
Risk Level
51/100
medium
⚠️ 3 Active Exploits🆕 1Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
3High
15Medium
11Low
7Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Command Injection
3
2
Buffer Overflow
3
3
Integer Overflow
2
4
Infoleak
1
5
Path Traversal
1
Most Affected Products
1. Git Git445
2. Git git250
3. git-scm Git28
4. redhat/git16
5. Fedoraproject Fedora9
Recent Vulnerabilities
See more →CVE-2026-19592
CVSS 7.3high
Sep 1, 2026🔧 No Patch
CVE-2026-62960
CVSS 7.4high
Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows
Aug 21, 2026🔧 No Patch
CVE-2025-26625
CVSS 8.6high
Git LFS may write to arbitrary files via crafted symlinks
Oct 17, 2025
https://reddit.com/r/cybersecurity/comments/1n11npa/organizations_warned_of_exploited_git/
unknown
Organizations Warned of Exploited Git Vulnerability
Aug 26, 2025🔧 No Patch
https://reddit.com/r/cybersecurity/comments/1n0v4zc/git_vulnerability_leading_to_rce_is_being/
unknown
Git vulnerability leading to RCE is being exploited by attackers
Aug 26, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-git-code-execution-flaw/
unknown
CISA warns of actively exploited Git code execution flaw
Aug 26, 2025⚠ Exploited🔧 No Patch
REDHAT-BUG-2379326
CVSS 1.0low
Jul 10, 2025🔧 No Patch
REDHAT-BUG-2379125
CVSS 4.0medium
Jul 9, 2025🔧 No Patch
REDHAT-BUG-2379124
CVSS 4.0medium
Jul 9, 2025🔧 No Patch
REDHAT-BUG-2378806
CVSS 7.0high
Jul 8, 2025🔧 No Patch
Monitor git in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.