Skip to content
OpenAdvisories

Package · Azure Linux

git

29 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.5
    CVE-2026-105437 Public exploit

    Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger…

    git-for-windows git git git Debian Azure Linux Alpine
  • High 8.6
    CVE-2025-27614

    Gitk allows arbitrary command execution

    Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script (e.g., Bourne shell, Perl, Python, ..…

    j6t gitk git git Debian Ubuntu Azure Linux Alpine
  • High 8.1
    CVE-2025-48384 Exploited Public exploit

    Git allows arbitrary code execution through broken config quoting

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). W…

    git git git git Debian Ubuntu Azure Linux Alpine
    KEV Aug 25, 2025
  • High 8.6
    CVE-2025-48385

    Git alllows arbitrary file writes via bundle-uri parameter injection

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a bundle advertised by the remote se…

    git git git git Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2024-52005 Public exploit

    The sideband payload is passed unfiltered to the terminal in git

    Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "r…

    git git git git Debian Ubuntu Azure Linux Wolfi
  • High 7.4
    CVE-2024-32465

    Git's protections for cloning untrusted repositories can be bypassed

    Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific protections to make that a safe operation even with an …

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.2
    CVE-2024-32004 Public exploit

    Git vulnerable to Remote Code Execution while cloning special-crafted local repositories

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been …

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.6
    CVE-2022-41953

    Git clone remote code execution vulnerability in git-for-windows

    Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line. Git GUI has a function to clone repositories. Immediately after the local clone is available, Git GU…

    git-for-windows git git Azure Linux
  • High 7.5
    CVE-2022-30947

    Path traversal in Jenkins Git Mercurial and Repo Plugins

    Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM content…

    Jenkins Project Jenkins Git Plugin git org.jenkins-ci.plugins:git Web / CMS Azure Linux Maven