Skip to content
OpenAdvisories

Vendor

gitahead

3 known vulnerabilities.

Products

GitAhead 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-106059

    GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript

    GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path cont…

    gitahead GitAhead
  • High 7.5
    CVE-2026-106058

    GitAhead through 2.7.1 OS Command Injection via Git Filter Filenames

    GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $(comma…

    gitahead GitAhead
  • High 7.5
    CVE-2026-105295

    GitAhead 2.5.0 through 2.7.1 Unverified Update Installation and TLS Bypass

    GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate …

    gitahead GitAhead