GHSA-Q6R2-X2CC-VRP7

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-15 15:10:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1767...

GHSA-R5PH-XG7Q-XFRP

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1581...

GHSA-86C2-4X57-WC8G

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:10:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1581...

GHSA-36MM-RH9Q-CPQQ

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-15 17:54:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1812...

CVE-2024-50338

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 19:16:10+00:00| seen...

GHSA-HMG8-H7QF-7CXR

creationtimestamp| type| source ---|---|--- 2025-01-14 17:04:36+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-5/ 2025-01-14 19:11:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1589...

GitHub: CVE-2024-50338 Malformed URL allows information disclosure through git-credential-manager

...

Git Lfs 注入漏洞

Git Lfs is a command line tool from the Git Lfs team for working with large files in git projects. An injection vulnerability exists in Git Lfs versions prior to v3.6.1. An attacker exploiting this vulnerability could retrieve a user's Git credentials...

PT-2025-2873 · Unknown +1 · Git For Windows +2

Name of the Vulnerable Software and Affected Versions: Git Credential Manager versions prior to 2.6.1 Git for Windows versions prior to 2.47.1.2 Description: The issue arises from a mismatch in newline character treatment between Git and Git Credential Manager GCM. GCM considers LF, CRLF, and CR ...

Git Credential Manager 信息泄露漏洞

Git Credential Manager GCM is a secure Git credential assistant open-sourced by Git Ecosystem. An information disclosure vulnerability exists in Git Credential Manager. An attacker could exploit this vulnerability to capture the credentials of another Git remote. The following products and versio...

Git 安全漏洞

Git is a free, open source distributed version control system open-sourced by Git. Git has a security vulnerability that stems from the fact that any URL-encoded portion can be decoded...

PT-2025-2920

Name of the Vulnerable Software and Affected Versions Git versions prior to v2.48.1 Git versions prior to v2.47.2 Git versions prior to v2.46.3 Git versions prior to v2.45.3 Git versions prior to v2.44.3 Git versions prior to v2.43.6 Git versions prior to v2.42.4 Git versions prior to v2.41.3 Git...

PT-2025-2874

Name of the Vulnerable Software and Affected Versions Git versions prior to v2.48.1 Git versions prior to v2.47.2 Git versions prior to v2.46.3 Git versions prior to v2.45.3 Git versions prior to v2.44.3 Git versions prior to v2.43.6 Git versions prior to v2.42.4 Git versions prior to v2.41.3 Git...

PT-2025-2951

Name of the Vulnerable Software and Affected Versions Git LFS versions prior to 3.6.1 Description Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checki...

Git 安全漏洞

Git is a free, open source distributed version control system open-sourced by Git. A security vulnerability exists in Git that stems from parsing a single carriage return as a line break...

PT-2025-2919

Name of the Vulnerable Software and Affected Versions Git affected versions not specified Description The issue concerns Git, a source code management tool. When cloning from a server, informational or error messages are transported from the remote Git process to the client via the "sideband...

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : Git vulnerabilities (USN-7207-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7207-1 advisory. It was discovered that Git incorrectly handled certain URLs when asking for credentials. An attacker could possibly use this issue to...

KLA79449 OSI vulnerability in Git LFS

Information disclosure vulnerability was found in Git LFS. Malicious users can exploit this vulnerability via special crafted URL to obtain sensitive information. Original advisories Git LFS 3.6.1 Exploitation Related products Git-LFS CVE list CVE-2024-53263 critical Solution Update to the latest...

KLA79448 OSI vulnerabilities in Git for Windows

Multiple vulnerabilities were found in Git for Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information. Below is a complete list of vulnerabilities: 1. Information disclosure vulnerability can be exploited via special crafted URL to obtain sensitive information...

CVE-2024-53263: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters, and then sends any credentials it receives back fr...