PatchTheCVE: libgit2 projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2016-10130: The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow mhttps://patchthecve.com/cve/CVE-2016-10130.htmlhttps://patchthecve.com/cve/CVE-2016-10130.htmlWed, 17 Jun 2026 00:39:06 +0000MEDIUM 5.9: The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.CVE-2016-10129: The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cahttps://patchthecve.com/cve/CVE-2016-10129.htmlhttps://patchthecve.com/cve/CVE-2016-10129.htmlWed, 17 Jun 2026 00:39:06 +0000HIGH 7.5: The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line.CVE-2016-10128: Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol supporthttps://patchthecve.com/cve/CVE-2016-10128.htmlhttps://patchthecve.com/cve/CVE-2016-10128.htmlWed, 17 Jun 2026 00:39:06 +0000CRITICAL 9.8: Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.CVE-2016-8569: The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of sehttps://patchthecve.com/cve/CVE-2016-8569.htmlhttps://patchthecve.com/cve/CVE-2016-8569.htmlWed, 17 Jun 2026 00:54:32 +0000MEDIUM 5.5: The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.CVE-2016-8568: The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial ofhttps://patchthecve.com/cve/CVE-2016-8568.htmlhttps://patchthecve.com/cve/CVE-2016-8568.htmlWed, 17 Jun 2026 00:54:32 +0000MEDIUM 5.5: The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.