Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

isomorphic-git vulnerabilities

5 published CVEs name isomorphic-git among the affected products.

Newest CVEs

  • CVE-2026-63395

    isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)

    isomorphic-git · isomorphic-git

    High8.8
  • CVE-2026-63475

    isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)

    isomorphic-git · isomorphic-git

    Medium4.3
  • CVE-2026-63476

    isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)

    isomorphic-git · isomorphic-git

    Medium4.3
  • CVE-2026-63478

    isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout

    isomorphic-git · isomorphic-git

    Medium5.3
  • CVE-2026-89011

    isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfo

    isomorphic-git · isomorphic-git

    High7.1