{"items":[{"id":"CVE-2026-53586","published":"2026-08-20T18:40:08.673Z","updated":"2026-08-21T21:46:05.425Z","title":"libgit2: HTTP transport can leak credentials to an offsite redirect target","severity":"MEDIUM","score":6.5,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2026-53583","published":"2026-08-20T18:39:03.676Z","updated":"2026-08-20T19:04:42.247Z","title":"libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend","severity":"MEDIUM","score":6.5,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2026-53585","published":"2026-08-20T18:37:44.115Z","updated":"2026-08-25T15:21:43.819Z","title":"libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header","severity":"MEDIUM","score":5.3,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2026-53587","published":"2026-08-20T18:36:43.055Z","updated":"2026-08-20T19:18:33.821Z","title":"libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data","severity":"HIGH","score":7.5,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2026-53584","published":"2026-08-20T18:35:10.280Z","updated":"2026-08-20T19:48:17.848Z","title":"libgit2: Submodule path traversal","severity":"MEDIUM","score":4.3,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.00328,"kevAdded":null},{"id":"CVE-2026-5917","published":"2026-08-11T21:40:29.078Z","updated":"2026-10-01T15:20:07.878Z","title":"libgit2 Shell Command Injection via ssh_libssh2 Backend","severity":"HIGH","score":8.6,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.01427,"kevAdded":null},{"id":"CVE-2024-24577","published":"2024-02-06T21:36:12.517Z","updated":"2025-05-15T19:43:35.897Z","title":"libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`","severity":"HIGH","score":8.6,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.01546,"kevAdded":null},{"id":"CVE-2024-24575","published":"2024-02-06T21:27:57.328Z","updated":"2025-02-13T17:40:13.105Z","title":"libgit2 is vulnerable to a denial of service attack in `git_revparse_single`","severity":"HIGH","score":7.5,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.01443,"kevAdded":null},{"id":"CVE-2023-22742","published":"2023-01-20T22:49:06.378Z","updated":"2025-03-10T21:21:08.962Z","title":"libgit2 fails to verify SSH keys by default","severity":"MEDIUM","score":5.3,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2018-10888","published":"2018-07-10T14:00:00.000Z","updated":"2024-09-16T16:18:17.644Z","title":"A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading…","severity":"MEDIUM","score":6.5,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.01848,"kevAdded":null},{"id":"CVE-2018-10887","published":"2018-07-10T14:00:00.000Z","updated":"2024-09-17T01:06:07.091Z","title":"A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may…","severity":"HIGH","score":8.1,"vendor":"libgit2","product":"libgit2","kev":false,"epss":0.02051,"kevAdded":null}]}