Skip to content
OpenAdvisories
Low DSA-5850-1 2 CVEs

git - security update

Published Jan 26, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 git 1:2.39.5-0+deb12u2

Vulnerabilities 2

  • Low 2.1
    CVE-2024-50349

    Git does not sanitize URLs when asking for credentials interactively

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helpe…

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 2.1
    CVE-2024-52006

    Newline confusion in credential helpers can lead to credential exfiltration in git

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git c…

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi