l
libgit2
Security Risk Profile
58
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 14 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 14, 2018 to present
14
Total CVEs
8
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
58/100
medium
Severity Distribution
Critical
4High
4Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Input Validation
2
2
Integer Overflow
2
3
OS Command Injection
1
4
Command Injection
1
5
Buffer Overflow
1
Most Affected Products
1. libgit2 libgit220
2. ubuntu/libgit217
3. Debian Debian Linux10
4. git-scm Git10
5. debian/libgit29
Recent Vulnerabilities
See more →CVE-2026-53583
CVSS 6.5medium
libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend
Aug 20, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q3/525
unknown
Multiple vulnerabilities fixed in libgit2-1.9.5, 1.9.7
Aug 20, 2026🔧 No Patch
CVE-2026-5917
CVSS 8.6high
libgit2 Shell Command Injection via ssh_libssh2 Backend
Aug 11, 2026
CVE-2024-24575
CVSS 7.5EPSS 0%high
libgit2 is vulnerable to a denial of service attack in `git_revparse_single`
Feb 6, 2024
CVE-2024-24577
CVSS 9.8EPSS 0%critical
libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`
Feb 6, 2024
CVE-2023-22742
CVSS 5.9medium
libgit2 fails to verify SSH keys by default
Jan 20, 2023
CVE-2020-12278
CVSS 9.8critical
Apr 27, 2020
CVE-2020-12279
CVSS 9.8critical
Apr 27, 2020
CVE-2014-9390
CVSS 9.8critical
Feb 12, 2020
CVE-2018-15501
CVSS 7.5high
Aug 18, 2018
Monitor libgit2 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.