vciy

CVEs we hold for Git

Records whose assigning authority named Git as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-9807Incorrect Authorization in GitLabGitLab
CVE-2026-97626Gitea profile feed disclosure bypassing user visibilityGitea
CVE-2026-97229Integer Overflow or Wraparound in GitLabGitLab
CVE-2026-97208Gitea push mirror API bypass of DISABLE_NEW_PUSH policyGitea
CVE-2026-9694Improper Neutralization of Substitution Characters in GitLabGitLab
CVE-2026-96893Improper Neutralization of Input Used for LLM Prompting in GitLabGitLab
CVE-2026-96890Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to…GitHub Enterprise Server
CVE-2026-96594Gitea repository media API stored XSSGitea
CVE-2026-96589Gitea private repository access retained after rejected transferGitea
CVE-2026-96580Gitea Actions memory exhaustion through large static matricesGitea
CVE-2026-96404Gitea installer authentication bypass for existing accountsGitea
CVE-2026-96400Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINSGitea
CVE-2026-96399Gitea denial of service through external issue tracker patternsGitea
CVE-2026-95112Gitea issue reference parsing CPU exhaustionGitea
CVE-2026-95106Gitea review and execution mismatch through duplicate tree entriesGitea
CVE-2026-94456Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and…GitroomHQ postiz-app
CVE-2026-94455Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API keyGitroomHQ postiz-app
CVE-2026-94205Gitea fork workflow approval bypass through maintainer-triggered eventsGitea
CVE-2026-93577Integer Overflow or Wraparound in GitLabGitLab
CVE-2026-9312Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed access to internal services via path…GitHub Enterprise Server
CVE-2026-92883Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
CVE-2026-92874Incorrect Authorization in GitLabGitLab
CVE-2026-9268Incorrect Authorization in GitLabGitLab
CVE-2026-92628Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLabGitLab
CVE-2026-92530Use of Less Trusted Source in GitLabGitLab
CVE-2026-92529Incorrect Authorization in GitLabGitLab
CVE-2026-92528Incorrect Authorization in GitLabGitLab
CVE-2026-92470Missing Authorization in GitLabGitLab
CVE-2026-9204Server-Side Request Forgery (SSRF) in GitLabGitLab
CVE-2026-91986gitoxide gix-transport before 0.59.2 CR/LF/NUL InjectionGitoxideLabs gitoxide
CVE-2026-9132Missing authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository contents via…GitHub Enterprise Server
CVE-2026-9106UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner management via…GitHub Enterprise Server
CVE-2026-90970Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI GatewayGitLab AI Gateway
CVE-2026-90712Gitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of serviceGitlawb openclaude
CVE-2026-89430Gitea push mirror SSRF and forced writes to internal Git hostsGitea
CVE-2026-8937Missing Authorization in GitLabGitLab
CVE-2026-89182Gitea push-to-create bypass of FORCE_PRIVATE policyGitea
CVE-2026-89078Double Free in GitLabGitLab
CVE-2026-88765Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLabGitLab
CVE-2026-87819GitPython before 3.1.60 Denial of Service via ReDoSgitpython-developers GitPython
CVE-2026-87818GitPython 3.1.59 Local File Content Oracle via --no-indexgitpython-developers GitPython
CVE-2026-87817GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonationgitpython-developers GitPython
CVE-2026-87719Deserialization of Untrusted Data in GitLabGitLab
CVE-2026-8716Use of Incorrectly-Resolved Name or Reference in GitLabGitLab
CVE-2026-86684Gitea push mirror local path check uses the repository ownerGitea
CVE-2026-8667Incorrect Authorization in GitLabGitLab
CVE-2026-86341Access Control Check Implemented After Asset is Accessed in GitLabGitLab
CVE-2026-8606Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL EndpointGitHub Enterprise Server
CVE-2026-8589Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
CVE-2026-85706Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabGitLab
CVE-2026-85529Incorrect Authorization in GitLabGitLab
CVE-2026-84739Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
CVE-2026-8472Missing Authorization in GitLabGitLab
CVE-2026-84284Incorrect Authorization in GitLabGitLab
CVE-2026-8330Insertion of Sensitive Information into Log File in GitLabGitLab
CVE-2026-82837Insertion of Sensitive Information Into Sent Data in GitLabGitLab
CVE-2026-8280Allocation of Resources Without Limits or Throttling in GitLabGitLab
CVE-2026-82632Incorrect Authorization in GitLabGitLab
CVE-2026-82255gitoxide 0.25.4 HTTP Credential Leak via RedirectGitoxideLabs gitoxide
CVE-2026-82254gitoxide before 0.69.0 Denial of Service via gix-packGitoxideLabs gitoxide
CVE-2026-82253gitoxide before 0.82.0 Path Traversal via Submodule Name Validation BypassGitoxideLabs gitoxide
CVE-2026-82252gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodulesGitoxideLabs gitoxide
CVE-2026-82251gitoxide before 0.52.1 Path Traversal via Submodule NameGitoxideLabs gitoxide
CVE-2026-82250gitoxide gix-packetline before 0.21.5 Denial of ServiceGitoxideLabs gitoxide
CVE-2026-82249gitoxide before 0.38.2 Credential Helper Protocol Field InjectionGitoxideLabs gitoxide
CVE-2026-82248gitoxide before 0.33.0 Path Traversal via symlink followingGitoxideLabs gitoxide
CVE-2026-82247gitoxide before 0.37.1 HTTP Basic credential leak via URL parsingGitoxideLabs gitoxide
CVE-2026-81839Incorrect Authorization in GitLabGitLab
CVE-2026-8144Missing Authorization in GitLabGitLab
CVE-2026-8106Reflected HTML injection vulnerability in GitHub Enterprise Server Management Console login page allowed credential…GitHub Enterprise Server
CVE-2026-8034Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusionGitHub Enterprise Server
CVE-2026-8030Missing Authorization in GitLabGitLab
CVE-2026-79960Gitea deploy key pushes acting as the repository ownerGitea
CVE-2026-79708Incorrect Authorization in GitLabGitLab
CVE-2026-78679GitPython before 3.1.59 Arbitrary File Read via TagReference.creategitpython-developers GitPython
CVE-2026-78678GitPython before 3.1.59 Arbitrary File Read via Repo.blame()gitpython-developers GitPython
CVE-2026-78677GitPython before 3.1.59 Path Traversal via separate-git-dirgitpython-developers GitPython
CVE-2026-78676GitPython before 3.1.59 Remote Code Execution via Config Injectiongitpython-developers GitPython
CVE-2026-78675GitPython before 3.1.59 Local File Content Disclosure via .gitmodulesgitpython-developers GitPython
CVE-2026-78433Gitea private attachment disclosure through repository mismatchGitea
CVE-2026-78335Incorrect Authorization in GitLabGitLab
CVE-2026-78252Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
CVE-2026-78231Gitea blind SSRF through OpenID assertion verificationGitea
CVE-2026-77987GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgeryGitHub Enterprise Server
CVE-2026-77912Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown…GitHub Enterprise Server
CVE-2026-77801Allocation of Resources Without Limits or Throttling in GitLabGitLab
CVE-2026-7767URL Redirection to Untrusted Site ('Open Redirect') in GitLabGitLab
CVE-2026-76851Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access…GitHub Enterprise Server
CVE-2026-76222GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Namegitpython-developers GitPython
CVE-2026-76221GitPython before 3.1.58 Config Injection via option-namegitpython-developers GitPython
CVE-2026-76220GitPython before 3.1.58 Command Execution via split_single_char_optionsgitpython-developers GitPython
CVE-2026-76219GitPython before 3.1.58 Arbitrary File Overwrite via read-treegitpython-developers GitPython
CVE-2026-76218GitPython before 3.1.58 Remote Code Execution via Repo.initgitpython-developers GitPython
CVE-2026-76217GitPython before 3.1.58 Arbitrary File Read via pathspec-from-filegitpython-developers GitPython
CVE-2026-75871Server-Side Request Forgery (SSRF) in GitLab AI GatewayGitLab AI Gateway
CVE-2026-7541Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via unauthenticated API endpointGitHub Enterprise Server
CVE-2026-7514Missing Authorization in GitLabGitLab
CVE-2026-75101Authorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and…GitHub Enterprise Server
CVE-2026-7492Missing Authorization in GitLabGitLab
CVE-2026-7487Access Control Check Implemented After Asset is Accessed in GitLabGitLab
CVE-2026-7481Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
CVE-2026-7471Server-Side Request Forgery (SSRF) in GitLabGitLab
CVE-2026-7427Allocation of Resources Without Limits or Throttling in GitLabGitLab
CVE-2026-73814Gitea repository ownership escalation by administratorsGitea
CVE-2026-73804Gitea API token scope escalation through HTTP signaturesGitea
CVE-2026-73802Gitea Runner host isolation bypass through container optionsGitea Runner
CVE-2026-73800Gitea reusable workflow secret exposure in pull_request_targetGitea
CVE-2026-7377Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
CVE-2026-73625GitPython before 3.1.54 Remote Code Execution via kwarg value smugglinggitpython-developers GitPython
CVE-2026-73624GitPython before 3.1.54 Arbitrary File Overwrite via diffgitpython-developers GitPython
CVE-2026-73623GitPython before 3.1.54 Remote Code Execution via --templategitpython-developers GitPython
CVE-2026-73622GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()gitpython-developers GitPython
CVE-2026-73621GitPython before 3.1.56 Arbitrary File Truncation via Commit.countgitpython-developers GitPython
CVE-2026-73620GitPython before 3.1.57 Arbitrary File Overwrite and Readgitpython-developers GitPython
CVE-2026-73619GitPython before 3.1.57 Arbitrary File Read via Repo.archive()gitpython-developers GitPython
CVE-2026-73539Gitea external renderer argument injection and code executionGitea
CVE-2026-73535Gitea second-factor bypass through OpenID identity linkingGitea
CVE-2026-73278Gitea WebAuthn bypass during OAuth and OIDC sign-inGitea
CVE-2026-73273Gitea Maven checksum upload quota bypass and memory exhaustionGitea
CVE-2026-73135Gitea hidden-owner repository listing disclosureGitea
CVE-2026-73130Gitea repository initialization resource exhaustionGitea
CVE-2026-73126Gitea private workflow badge token scope bypassGitea
CVE-2026-7250Allocation of Resources Without Limits or Throttling in GitLabGitLab
CVE-2026-71301Gitea private pull request title disclosure through markupGitea
CVE-2026-71184Gitea fork workflow approval bypass through review eventsGitea
CVE-2026-70407Gitea organization listing token scope bypassGitea
CVE-2026-70406Gitea private comparison disclosure with public-only tokensGitea
CVE-2026-70402Gitea local code execution through writable Git hooksGitea
CVE-2026-70400Gitea private migration creation with public-only tokensGitea
CVE-2026-70396Gitea organization repository creation token scope bypassGitea
CVE-2026-70357Gitea repository migration SSRF through DNS rebindingGitea
CVE-2026-6976Authorization Bypass Through User-Controlled Key in GitLabGitLab
CVE-2026-69097GitPython before 3.1.53 Config Injection via Submodule Namesgitpython-developers GitPython
CVE-2026-68964Gitea restricted-user SSH and GPG key metadata disclosureGitea
CVE-2026-6896Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
CVE-2026-68957Gitea restricted-user issue search disclosureGitea
CVE-2026-6883Missing Authorization in GitLabGitLab
CVE-2026-6821Missing Authorization in GitLabGitLab
CVE-2026-67577Gitea restricted-user activity and heatmap disclosureGitea
CVE-2026-6736Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the…GitHub Enterprise Server
CVE-2026-67326GitPython before 3.1.50 Newline Injection via config_writer sectiongitpython-developers GitPython
CVE-2026-67325GitPython before 3.1.51 Command Injection via option prefix abbreviationgitpython-developers GitPython
CVE-2026-67324GitPython 3.1.50 Authentication Bypass via Joined Short Optionsgitpython-developers GitPython
CVE-2026-67323GitPython before 3.1.51 Command Injection via unguarded Git optionsgitpython-developers GitPython
CVE-2026-67322GitPython before 3.1.52 Environment Variable Exfiltration via clone_fromgitpython-developers GitPython
CVE-2026-6713Incorrect Authorization in GitLabGitLab
CVE-2026-66877Gitea fork workflow approval bypass through concurrency cancellationGitea
CVE-2026-66874Gitea required Actions check bypass through skipped workflowsGitea
CVE-2026-66853Gitea restricted-user organization metadata disclosureGitea
CVE-2026-66849Gitea restricted-user package visibility bypassGitea
CVE-2026-6567Incorrect Authorization in GitLabGitLab
CVE-2026-6515Insufficient Session Expiration in GitLabGitLab
CVE-2026-63792Gitea private reusable workflow disclosure to fork runsGitea
CVE-2026-63728Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Featuregitleaks
CVE-2026-6352Incorrect Authorization in GitLabGitLab
CVE-2026-6336Incorrect Authorization in GitLabGitLab
CVE-2026-6335Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
CVE-2026-63021Gitea Swift package manifest memory exhaustionGitea
CVE-2026-62960Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windowsgit-for-windows git
CVE-2026-62925Gitea Alpine package parsing memory exhaustionGitea
CVE-2026-6277Incorrect Authorization in GitLabGitLab
CVE-2026-6269Incorrect Authorization in GitLabGitLab
CVE-2026-6267Insertion of Sensitive Information Into Sent Data in GitLabGitLab
CVE-2026-6073Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLabGitLab
CVE-2026-6063Authorization Bypass Through User-Controlled Key in GitLabGitLab
CVE-2026-60021Gitea GitLab migration denial of serviceGitea
CVE-2026-60018Gitea OneDev migration denial of serviceGitea
CVE-2026-60010Gitea organization team policy bypass through repository APIGitea
CVE-2026-60008Gitea Jupyter notebook UI redress through CSS class injectionGitea
CVE-2026-60004no title heldGitea
CVE-2026-59774Gitea Org-mode file disclosure and code executionGitea
CVE-2026-59766Gitea private repository metadata disclosure after access revocationGitea
CVE-2026-59765SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud MetadataGitea Open Source Git Server
CVE-2026-59763Unbounded Arch package file metadata can cause resource amplification in Gitea package uploadsGitea Open Source Git Server
CVE-2026-5954Incorrect Authorization in GitLabGitLab
CVE-2026-5952Incorrect Authorization in GitLabGitLab
CVE-2026-5921Server-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via…GitHub Enterprise Server
CVE-2026-58511Webhook Authorization Header Returned in Plaintext via APIGitea Open Source Git Server
CVE-2026-58510GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on…Gitea Open Source Git Server
CVE-2026-58508Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)Gitea Open Source Git Server
CVE-2026-58507Private Repository Existence Disclosure via go-get Meta EndpointGitea Open Source Git Server
CVE-2026-5845Improper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise ServerGitHub Enterprise Server
CVE-2026-58445Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel APIGitea Open Source Git Server
CVE-2026-58444Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private…Gitea Open Source Git Server
CVE-2026-58443Public-only repository tokens can update private PR head branchesGitea Open Source Git Server
CVE-2026-58442Repository migration SSRF via multi-answer DNS allow-list bypassGitea Open Source Git Server
CVE-2026-58441SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURLGitea Open Source Git Server
CVE-2026-58440Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of…Gitea Open Source Git Server
CVE-2026-58439Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval FlagGitea Open Source Git Server
CVE-2026-58438Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot…Gitea Open Source Git Server
CVE-2026-58437Repository Visibility Manipulation via Git Push OptionsGitea Open Source Git Server
CVE-2026-58436ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requestsGitea Open Source Git Server
CVE-2026-58435Gitea LFS Deploy-Key Privilege EscalationGitea Open Source Git Server
CVE-2026-58434Private Repository Metadata Remains Accessible After Access RevocationGitea Open Source Git Server
CVE-2026-58433Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization settingGitea Open Source Git Server
CVE-2026-58432Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for…Gitea Open Source Git Server
CVE-2026-58431Public-only API token restriction is not enforced on team API routesGitea Open Source Git Server
CVE-2026-58429Public-Only Personal access tokens scope bypass in Organization and Permission EndpointsGitea Open Source Git Server
CVE-2026-58428Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)Gitea Open Source Git Server
CVE-2026-58427Private org member list leaked via /members API endpoint — incomplete fix for PR #38145Gitea Open Source Git Server

200 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.