git-scm vulnerabilities

Recent CVEs affecting git-scm products. 1 tracked.

git-scm has 1 tracked vulnerability, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 1. Most recent: 2025-07-08. Highest priority: CVE-2025-48384 (score 86/100).

• CVE-2025-48384 HIGH 8.0 EXPLOITED UPGRADE MITIGATE Git Link Following Vulnerability

FAQ

How do I fix git-scm vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is git-scm being exploited right now?

Yes: 1 git-scm CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which git-scm CVE should I patch first?

CVE-2025-48384 currently ranks highest (86/100): Git Link Following Vulnerability.

Products

• git

← Back to latest CVEs