← Packages
libgit2
C implementation of the Git core methods as a library with a solid API
- Current
- 1.9.2
- Candidate
- 1.9.7Stale
- License
- GPL-2.0-only WITH GCC-exception-2.0
Advisory · 6
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- libgit2: Inverted IP SubjectAltName Comparison in OpenSSL BackendOSV
- Fixed events
- 5853918c4c6a7b12f8becf4bd11ff4362ebb9020, 647dcb432980b84ede4cb5a008bbd1ccb4ead03d, c2aa35409ee0e6515df64da49750f13a0a42c47f, ef086bc3e4eedf62be38a910381aae24d49871ff, f7a4071c766ceea3915415e22134cbe3e581c420OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.238%FIRST
- Aliases
- GHSA-h7gc-w2gg-p9xpOSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NOSV
- Summary
- libgit2: Submodule path traversalOSV
- Fixed events
- 419637d3587396f5d139d6d88480eab3cd81e7a1, 467c2d95ed663df722f83a5960edf568514b128c, 5853918c4c6a7b12f8becf4bd11ff4362ebb9020, ec7371da9f359cd8293e9108e7a0b1c1b61b67c4, f7a4071c766ceea3915415e22134cbe3e581c420OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.328%FIRST
- Aliases
- GHSA-cw77-j82w-mchmOSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NOSV
- Summary
- libgit2: Unbounded Memory Allocation via Delta Object Result-Size HeaderOSV
- Fixed events
- 0cdfdd5fa8f8514c82413025e1e0808866cf7c30, 5853918c4c6a7b12f8becf4bd11ff4362ebb9020, c1896f06df22cc0ca5658df3a8f6cd7ede4cd6ae, dec22ac01ad9620c96b7b9ac3ef636ea46d43bed, f7a4071c766ceea3915415e22134cbe3e581c420OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.395%FIRST
- Aliases
- GHSA-27m5-gxxh-x79jOSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LOSV
- Summary
- libgit2: HTTP transport can leak credentials to an offsite redirect targetOSV
- Fixed events
- 07de6a7e438f95ac9a6efd3222a82117e871ed27, 5853918c4c6a7b12f8becf4bd11ff4362ebb9020, af2b29ad0a74d5bac9751376879ddaf848136d3b, c1507abc44647b3acd832a33a5b1c8c9f5ba8821, f7a4071c766ceea3915415e22134cbe3e581c420OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.276%FIRST
- Aliases
- GHSA-2889-x8f6-mc4xOSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NOSV
- Summary
- libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_dataOSV
- Fixed events
- 2c0ce8c0132ac38ab0db28239462a671e2e5440e, 5853918c4c6a7b12f8becf4bd11ff4362ebb9020, affda60c10fcef16723451c0d7dc71b71dc20ad3, d7a9fb87f504434e9f45228678953c4fa56e7640, f7a4071c766ceea3915415e22134cbe3e581c420OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 0.47%FIRST
- Aliases
- GHSA-pm24-4jhq-3xvmOSV
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOSV
- Summary
- libgit2 Shell Command Injection via ssh_libssh2 BackendOSV
- Fixed events
- 49e408b3208bc3093757a1c2db938d3590f3f412, fa864d0bc86ed672ff9444135ab33477e545f790OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 1.43%FIRST
- Aliases
- GHSA-xqj4-2j5v-rr75OSV
- KEV
- NoCISA
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NOSV
Description
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API.
Changelog
PR · 1
Issue · 1
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-10T17:23:44+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Checked Repository query; subpackage and local-patch applicability are not evaluated. | Last attempted | |
Not configured No reliable monitor identity/configuration. | — |