Skip to content
OpenAdvisories
High 1 exploited CVE DLA-4323-1 3 CVEs

git - security update

Published Oct 6, 2025 · Updated Oct 6, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 git 1:2.30.2-1+deb11u5

Vulnerabilities 3

  • High 8.1
    CVE-2025-48384 Exploited Public exploit

    Git allows arbitrary code execution through broken config quoting

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). W…

    git git git git Debian Ubuntu Azure Linux Alpine
    KEV Aug 25, 2025
  • High 8.5
    CVE-2025-46835

    Git GUI can create and overwrite files for which the user has write permission

    Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files …

    j6t git-gui git git Debian Ubuntu Alpine
  • Low 3.6
    CVE-2025-27613

    Gitk can create and truncate files in the user's home directory

    Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-…

    j6t gitk git git Debian Ubuntu Azure Linux Alpine