l
libgit2
Security Risk Profile
80
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 14, 2018 to present
13
Total CVEs
8
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
8.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
80/100
critical
🆕 1Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
5High
3Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Input Validation
2
2
Integer Overflow
2
3
OS Command Injection
1
4
Command Injection
1
5
Buffer Overflow
1
Most Affected Products
1. libgit2 libgit219
2. ubuntu/libgit217
3. Debian Debian Linux10
4. git-scm Git10
5. debian/libgit28
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q3/525
unknown
Multiple vulnerabilities fixed in libgit2-1.9.5, 1.9.7
Aug 20, 2026🔧 No Patch
CVE-2026-5917
CVSS 9.4critical
libgit2 v0.27.0-v1.9.0 Shell Command Injection via ssh_libssh2 Backend
Aug 11, 2026🔧 No Patch
CVE-2024-24575
CVSS 7.5EPSS 0%high
libgit2 is vulnerable to a denial of service attack in `git_revparse_single`
Feb 6, 2024
CVE-2024-24577
CVSS 9.8EPSS 0%critical
libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`
Feb 6, 2024
CVE-2023-22742
CVSS 5.9medium
libgit2 fails to verify SSH keys by default
Jan 20, 2023
CVE-2020-12278
CVSS 9.8critical
Apr 27, 2020
CVE-2020-12279
CVSS 9.8critical
Apr 27, 2020
CVE-2014-9390
CVSS 9.8critical
Feb 12, 2020
CVE-2018-15501
CVSS 7.5high
Aug 18, 2018
CVE-2018-10888
CVSS 6.5medium
Jul 4, 2018
Monitor libgit2 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.