https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-66413.htmlhttps://patchthecve.com/cve/CVE-2025-66413.htmlWed, 17 Jun 2026 09:56:47 +0000HIGH 7.4: Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashing is weak, it is possible for the attacker to brute-force the user's account name and password. This vulnerability is fihttps://patchthecve.com/cve/CVE-2025-48384.htmlhttps://patchthecve.com/cve/CVE-2025-48384.htmlThu, 24 Sep 2026 13:10:00 +0000HIGH 8.0: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with ahttps://patchthecve.com/cve/CVE-2024-52005.htmlhttps://patchthecve.com/cve/CVE-2024-52005.htmlWed, 17 Jun 2026 08:06:47 +0000HIGH 8.8: Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the standhttps://patchthecve.com/cve/CVE-2024-52006.htmlhttps://patchthecve.com/cve/CVE-2024-52006.htmlWed, 17 Jun 2026 08:06:47 +0000HIGH 7.5: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems (most https://patchthecve.com/cve/CVE-2024-50349.htmlhttps://patchthecve.com/cve/CVE-2024-50349.htmlWed, 17 Jun 2026 08:04:17 +0000MEDIUM 4.7: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helper), it prints out the host name for whichhttps://patchthecve.com/cve/CVE-2024-32465.htmlhttps://patchthecve.com/cve/CVE-2024-32465.htmlWed, 17 Jun 2026 07:29:40 +0000HIGH 7.3: Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific protections to make that a safe operation even with an untrusted source repository, but vulnerabhttps://patchthecve.com/cve/CVE-2024-32021.htmlhttps://patchthecve.com/cve/CVE-2024-32021.htmlWed, 17 Jun 2026 07:29:08 +0000LOW 3.9: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create hardlinks to arbitrary user-readable files on the same filesystem as the target repository https://patchthecve.com/cve/CVE-2024-32020.htmlhttps://patchthecve.com/cve/CVE-2024-32020.htmlWed, 17 Jun 2026 07:29:07 +0000LOW 3.9: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into the target repository's object database when source and target repository reside on the same disk. If the source repository is owned by a difhttps://patchthecve.com/cve/CVE-2024-32004.htmlhttps://patchthecve.com/cve/CVE-2024-32004.htmlWed, 17 Jun 2026 07:29:06 +0000HIGH 8.1: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.https://patchthecve.com/cve/CVE-2024-32002.htmlhttps://patchthecve.com/cve/CVE-2024-32002.htmlWed, 17 Jun 2026 07:29:06 +0000CRITICAL 9.0: Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory.