Product by Debian

Libgit2

14 known vulnerabilities in Libgit2 (Debian), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Libgit2 (Debian)

Critical	CVE-2020-12278	libgit2: Remote Code Execution also in 2 other products	9.8	27.04.2020
Critical	CVE-2020-12279	libgit2: Remote Code Execution also in 2 other products	9.8	27.04.2020
High	CVE-2026-5917	libgit2 Shell Command Injection via ssh_libssh2 Backend also in 2 other products	8.8	11.08.2026
High	CVE-2018-15501	libgit2: Out-of-Bounds Read also in 3 other products	7.5	18.08.2018
High	CVE-2018-10887	libgit2: Unexpected Sign Extension also in 2 other products	8.1	10.07.2018
Critical	CVE-2024-24577	libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add` also in 1 other product	8.6	06.02.2024
Medium	CVE-2018-10888	libgit2: Improper Input Validation also in 2 other products	6.5	10.07.2018
High	CVE-2026-53587	libgit2: Buffer Over-read also in 2 other products	7.5	20.08.2026
Medium	CVE-2018-8098	libgit2: Out-of-Bounds Read also in 3 other products	6.5	14.03.2018
Medium	CVE-2018-8099	libgit2: Double Free also in 3 other products	6.5	14.03.2018
Medium	CVE-2026-53586	libgit2: HTTP transport can leak credentials to an offsite redirect target also in 1 other product	6.5	20.08.2026
Medium	CVE-2026-53585	libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header also in 1 other product	5.3	20.08.2026
Medium	CVE-2026-53583	libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend also in 2 other products	6.5	20.08.2026
Medium	CVE-2026-53584	libgit2: Submodule path traversal also in 1 other product	4.3	20.08.2026