CVE-2026-5917 libgit2 Shell Command Injection via ssh_libssh2 Backend

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacte...

CVE-2026-5917 libgit2 Shell Command Injection via ssh_libssh2 Backend

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacte...

CVE-2026-5917

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacte...

CVE-2026-5917

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacte...

CVE-2026-5917 libgit2 Shell Command Injection via ssh_libssh2 Backend

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacte...

CVE-2026-5917

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 , when built with the libssh2 SSH backend, contain a shell command injection vulnerability. The gen_proto() function in ssh_libssh2.c inserts a repository path directly into a shell command string without escaping metacharacters (single quotes,...

PT-2026-70930

Name of the Vulnerable Software and Affected Versions libgit2 versions 0.27.0 through 1.9.0 Description Remote attackers can execute arbitrary commands on an SSH server when the software is built with the libssh2 SSH backend USE SSH=libssh2. The issue occurs because the gen proto function in ssh...

CVE-2026-5917: Improper Neutralization of Special Elements used in an OS Command

libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacte...

Fedora 43 : libgit2 / rust-libgit2-sys (2026-61dffcfbe9)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-61dffcfbe9 advisory. - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security...

[SECURITY] Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43

Native bindings to the libgit2 library...

[SECURITY] Fedora 43 Update: libgit2-1.9.6-1.fc43

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

Linux Distros Unpatched Vulnerability : CVE-2026-53587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...

Linux Distros Unpatched Vulnerability : CVE-2026-53586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...

Linux Distros Unpatched Vulnerability : CVE-2026-53583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...

Linux Distros Unpatched Vulnerability : CVE-2026-53584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...

Linux Distros Unpatched Vulnerability : CVE-2026-53585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...

[SECURITY] Fedora 44 Update: rust-libgit2-sys-0.18.7-1.fc44

Native bindings to the libgit2 library...

[SECURITY] Fedora 44 Update: libgit2-1.9.6-1.fc44

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

Fedora 44 : libgit2 / rust-libgit2-sys (2026-9d59721e9b)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d59721e9b advisory. - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security...

Fedora 45 : libgit2_1.9 / rust-libgit2-sys (2026-7c3fc14617)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-7c3fc14617 advisory. - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security...