Known Vulnerabilities for Git-shell by Git
Listed below are 1 of the newest known vulnerabilities associated with "Git-shell" by "Git".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65608 json | Grav versions >= 1.7.0 and before 2.0.9 contain a remote code execution vulnerability. FlexDirectory::dynamicDataField() reso... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-65590 json | n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/compu... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-64881 json | The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command executio... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-64879 json | A filename supplied during file upload is not properly sanitized before being used in system command execution, allowing an a... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-64878 json | Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument handling, resulting in re... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-64622 json | Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 fail to apply the configured authorization check (checkAuth/secre... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-63767 json | ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that a... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-63766 json | GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uv... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-63305 json | AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint where notifyCode and callb... | Not Provided | 2026-07-16 | 2026-07-20 |
| CVE-2026-63108 json | Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers ... | Not Provided | 2026-07-20 | 2026-07-20 |