This Week
Get Alerts ›
cvehawk_ Get Alerts
Software · Git

Git Vulnerabilities

The latest security flaws in Git, which ones attackers are using, and how to keep Git patched on servers and laptops.

New flaws, 30 days
0
Critical, 8 weeks
0
On CISA's exploited list
1
Latest exploited
25 Aug 2025

Git Security in Short

Git flaws usually need you to clone or work with a repository an attacker made: a malicious submodule or crafted path can run code on the machine doing the cloning. That makes build servers and CI runners, which clone many repositories automatically, the places to watch.

How to Keep Git Patched

  • Update Git on servers, CI runners and developer laptops alike: git --version shows what you have.
  • Be careful with --recurse-submodules on repositories you don't trust.
  • Build images for CI carry their own Git; rebuild them after a fix.

The Past Eight Weeks

No new Git flaws were published in the past eight weeks.

Rather not patch it yourself?

Bobble Solutions patches, backs up and watches Linux servers and WordPress sites.

Talk to Bobble Solutions