PatchTheCVEsourcetree vulnerabilities and fixes
Recent CVEs affecting sourcetree, with upgrade or downgrade steps. 1 tracked.
sourcetree has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-07-21. Highest priority: CVE-2026-21575 (score 40/100).
- CVE-2026-21575 HIGH 8.0 UPGRADE UPGRADE This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree fo
FAQ
How do I fix sourcetree vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sourcetree being exploited right now?
None of the tracked sourcetree CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sourcetree CVE should I patch first?
CVE-2026-21575 currently ranks highest (40/100): This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree fo.