git-scm has 3 CVEs on record between 2023 and 2025. The median CVSS is 6.2 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 33% vs 1% corpus
- Median CVSS
- 6.2
- Publish → KEV
- —(1)
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-48384High· 8.0Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals70CVE-2023-23946Medium· 6.2Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.846CVE-2023-22490Medium· 5.5Git is a revision control system42
git-scm vulnerabilities
CVEs affecting git-scm, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2025-48384High· 8.0CISA KEVPoCGit is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return a…
CVE-2023-23946Medium· 6.2PoCGit, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8
Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a path outside the working t…
CVE-2023-22490Medium· 5.5PoCGit is a revision control system
Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even …