CVE security advisories and vulnerability history for git by git-for-windows.
Last updated
git-for-windows git has 16 published CVE records since 2016, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting git-for-windows git, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of git-for-windows git's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
4 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of git-for-windows git's CVEs is confirmed exploited in the wild.
Public exploits
3
3 of git-for-windows git's CVEs have a known public exploit available.
Browse every git-for-windows git version named in a CVE, then pick one to see only the CVEs that affect it.
16 CVEs
Added to CISA KEV 2025-08-25
The CWE weakness categories most often found in git-for-windows git CVEs. Follow any weakness for its full explanation.
How many git-for-windows git CVEs were published each year.
Browse vulnerabilities for other products by git-for-windows.
Common questions about git-for-windows git vulnerabilities.
git-for-windows git has 16 published CVE records since 2016.
Yes — 1 of git-for-windows git's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 3 of git-for-windows git's CVEs have a known public exploit.
979 distinct git-for-windows git versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
git-for-windows git's CVEs most often map to these CWE weakness types: CWE-426 (Untrusted Search Path), CWE-427 (Uncontrolled Search Path Element), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
The average CVSS base score across git-for-windows git's scored CVEs is 7.4.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new git-for-windows git vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
