CVE-2025-48384
published 2025-07-08CVE-2025-48384: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to…
PriorityP180high8CVSS 3.1
AVNACHPRLUIRSCCHIHAH
KEVITWEXPLOIT
CISA Known Exploited Vulnerabilitydue 2025-09-15
Exploited in the wild
EPSS
2.77%
84.7th percentile
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | xcode | < 26.0 | 26.0 |
| apple | xcode | — | — |
| debian | debian_linux | — | — |
| debian | git | < git 1:2.39.5-0+deb12u3 (bookworm) | git 1:2.39.5-0+deb12u3 (bookworm) |
| git-scm | git | < 2.43.7 | 2.43.7 |
| git-scm | git | >= 2.44.0 < 2.44.4 | 2.44.4 |
| git-scm | git | >= 2.45.0 < 2.45.4 | 2.45.4 |
| git-scm | git | >= 2.46.0 < 2.46.4 | 2.46.4 |
| git-scm | git | >= 2.47.0 < 2.47.3 | 2.47.3 |
| git-scm | git | >= 2.48.0 < 2.48.2 | 2.48.2 |
| git-scm | git | >= 2.49.0 < 2.49.1 | 2.49.1 |
| git-scm | git | >= 2.50.0 < 2.50.1 | 2.50.1 |
| git | git | < 2.43.7 | 2.43.7 |
| git | git | — | — |
| git | git | — | — |
| git | git | — | — |
| git | git | — | — |
| git | git | — | — |
| git | git | — | — |
| git | git | — | — |
| git | git | >= 0 < 1:2.30.2-1+deb11u5 | 1:2.30.2-1+deb11u5 |
| git | git | >= 0 < 1:2.39.5-0+deb12u3 | 1:2.39.5-0+deb12u3 |
| git | git | >= 0 < 1:2.47.3-0+deb13u1 | 1:2.47.3-0+deb13u1 |
| git | git | >= 0 < 1:2.50.1-0.1 | 1:2.50.1-0.1 |
| git | git | >= 0 < 1:2.34.1-1ubuntu1.14 | 1:2.34.1-1ubuntu1.14 |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect .gitmodules files containing submodule path values with a trailing carriage return (\r), which is the malicious artifact enabling incorrect path resolution. ↗
- →Monitor for use of 'git clone --recursive' or 'git clone --recurse-submodules' against external/untrusted repositories, especially when combined with protocol.file.allow=always override. ↗
- →Detect the social engineering + malicious Git clone attack chain: threat actors combined social engineering with malicious Git repository cloning operations targeting unpatched Git installations. ↗
- ·The vulnerability only affects macOS and Linux; Windows is not listed as an affected platform in the observed exploitation activity. ↗
- ·The exploit requires the victim to perform a recursive clone (--recursive or --recurse-submodules); non-recursive clones are not affected by this attack chain. ↗
CVSS provenance
nvdv3.18.0HIGHCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
osv8.0HIGH
vulncheck8.0HIGH
cisa8.0HIGH
vendor_debian8.0HIGH
vendor_msrc8.0HIGH
vendor_redhat8.0HIGH
vendor_ubuntu3.6LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2025-48384: Xcode 26
vendor_apple·2025-09-15·CVSS 8.0
CVE-2025-48384 [HIGH] CVE-2025-48384: Xcode 26
Apple Security Update: About the security content of Xcode 26
Product: Xcode
Version: 26
CVE: CVE-2025-48384
Component: CVE-2025-48384
CISA
Git Link Following Vulnerability
cisa·2025-08-25·CVSS 8.0
CVE-2025-48384 [HIGH] CWE-59 Git Link Following Vulnerability
Vulnerability: Git Link Following Vulnerability
Affected: Git Git
Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9 ; https://access.redhat.com/errata/RHSA-2025:13933 ; https://alas.aws.amazon.com/AL2/ALAS2-2025-2941.html ; https://linux.oracle.com/errata/ELSA-2025-11534.html ; https://msrc.
Ubuntu
Git regression
vendor_ubuntu·2025-07-10·CVSS 3.6
CVE-2025-27613 [LOW] Git regression
Title: Git regression
Summary: USN-7626-1 introduced a regression in Git
USN-7626-1 fixed vulnerabilities in Git. The updates for CVE-2025-27613
and CVE-2025-46835 caused Gitk and Git GUI to not work properly on Ubuntu
16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS, and
were disabled in USN-7626-2. The problematic updates for the
aforementioned CVEs have now been corrected and reinstated in this update.
We apologize for the inconvenience.
Original advisory details:
Avi Halachmi discovered that Git incorrectly managed file modification
constraints with Gitk. An attacker could possibly use this issue to create
or write to arbitrary files on the system. (CVE-2025-27613)
Avi Halachmi discovered that Git incorrectly handled arguments when
invoking the Gitk utility. If
Ubuntu
Git regression
vendor_ubuntu·2025-07-09·CVSS 3.6
CVE-2025-27613 [LOW] Git regression
Title: Git regression
Summary: USN-7626-1 introduced a regression in Git.
USN-7626-1 fixed vulnerabilities in Git. The update introduced a regression
in gitk and git-gui. This update reverts the corresponding fixes for
CVE-2025-27613 and CVE-2025-46835 pending further investigation.
We apologize for the inconvenience.
Original advisory details:
Avi Halachmi discovered that Git incorrectly managed file modification
constraints with Gitk. An attacker could possibly use this issue to create
or write to arbitrary files on the system. (CVE-2025-27613)
Avi Halachmi discovered that Git incorrectly handled arguments when
invoking the Gitk utility. If a user were tricked into cloning a malicious
Git repository, an attacker could possibly use this issue to run arbitrary
commands. This issue on
Ubuntu
Git vulnerabilities
vendor_ubuntu·2025-07-08·CVSS 3.6
CVE-2025-46835 [LOW] Git vulnerabilities
Title: Git vulnerabilities
Summary: Several security issues were fixed in Git.
Avi Halachmi discovered that Git incorrectly managed file modification
constraints with Gitk. An attacker could possibly use this issue to create
or write to arbitrary files on the system. (CVE-2025-27613)
Avi Halachmi discovered that Git incorrectly handled arguments when
invoking the Gitk utility. If a user were tricked into cloning a malicious
Git repository, an attacker could possibly use this issue to run arbitrary
commands. This issue only affected Ubuntu 24.04 LTS, Ubuntu 24.10, and
Ubuntu 25.04. (CVE-2025-27614)
Johannes Sixt discovered that Git incorrectly managed file modification
constraints with Git GUI. If a user were tricked into editing a file in a
malicious Git repository, an attacker could p
Microsoft
GitHub: CVE-2025-48384 Git Symlink Vulnerability
vendor_msrc·2025-07-08·CVSS 8.0
CVE-2025-48384 [HIGH] GitHub: CVE-2025-48384 Git Symlink Vulnerability
GitHub: CVE-2025-48384 Git Symlink Vulnerability
Description: CVE-2025-48384 is regarding a vulnerability in Git where when reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. GitHub created this CVE on their behalf. The documented Visual Studio updates incorpo
Red Hat
git: Git arbitrary code execution
vendor_redhat·2025-07-08·CVSS 8.0
CVE-2025-48384 [HIGH] CWE-93 git: Git arbitrary code execution
git: Git arbitrary code execution
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. Thi
Debian
CVE-2025-48384: git - Git is a fast, scalable, distributed revision control system with an unusually r...
vendor_debian·2025·CVSS 8.0
CVE-2025-48384 [HIGH] CVE-2025-48384: git - Git is a fast, scalable, distributed revision control system with an unusually r...
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7
OSV
git regression
osv·2025-07-10·CVSS 3.6
CVE-2025-27613 [LOW] git regression
git regression
USN-7626-1 fixed vulnerabilities in Git. The updates for CVE-2025-27613
and CVE-2025-46835 caused Gitk and Git GUI to not work properly on Ubuntu
16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS, and
were disabled in USN-7626-2. The problematic updates for the
aforementioned CVEs have now been corrected and reinstated in this update.
We apologize for the inconvenience.
Original advisory details:
Avi Halachmi discovered that Git incorrectly managed file modification
constraints with Gitk. An attacker could possibly use this issue to create
or write to arbitrary files on the system. (CVE-2025-27613)
Avi Halachmi discovered that Git incorrectly handled arguments when
invoking the Gitk utility. If a user were tricked into cloning a malicious
Git repositor
OSV
git regression
osv·2025-07-09·CVSS 3.6
CVE-2025-27613 [LOW] git regression
git regression
USN-7626-1 fixed vulnerabilities in Git. The update introduced a regression
in gitk and git-gui. This update reverts the corresponding fixes for
CVE-2025-27613 and CVE-2025-46835 pending further investigation.
We apologize for the inconvenience.
Original advisory details:
Avi Halachmi discovered that Git incorrectly managed file modification
constraints with Gitk. An attacker could possibly use this issue to create
or write to arbitrary files on the system. (CVE-2025-27613)
Avi Halachmi discovered that Git incorrectly handled arguments when
invoking the Gitk utility. If a user were tricked into cloning a malicious
Git repository, an attacker could possibly use this issue to run arbitrary
commands. This issue only affected Ubuntu 24.04 LTS, Ubuntu 24.10, and
Ubuntu 25.04
OSV
git vulnerabilities
osv·2025-07-08·CVSS 3.6
CVE-2025-27613 [LOW] git vulnerabilities
git vulnerabilities
Avi Halachmi discovered that Git incorrectly managed file modification
constraints with Gitk. An attacker could possibly use this issue to create
or write to arbitrary files on the system. (CVE-2025-27613)
Avi Halachmi discovered that Git incorrectly handled arguments when
invoking the Gitk utility. If a user were tricked into cloning a malicious
Git repository, an attacker could possibly use this issue to run arbitrary
commands. This issue only affected Ubuntu 24.04 LTS, Ubuntu 24.10, and
Ubuntu 25.04. (CVE-2025-27614)
Johannes Sixt discovered that Git incorrectly managed file modification
constraints with Git GUI. If a user were tricked into editing a file in a
malicious Git repository, an attacker could possibly use this issue to
create or write to arbitrary files
OSV
CVE-2025-48384: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full acce
osv·2025-07-08·CVSS 8.0
CVE-2025-48384 [HIGH] CVE-2025-48384: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full acce
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7
VulnCheck
Git Link Following Vulnerability
vulncheck·2025·CVSS 8.0
CVE-2025-48384 [HIGH] CWE-59 Git Link Following Vulnerability
Git Link Following Vulnerability
Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.
Affected: Git Git
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Exploitation References: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json; https://www.kucoin.com/blog/en-breaking-lazarus-group-apt38-targets-crypto-sector-with-sophisticated-phishing-campaign; https://hs-8813571.f.hubspotemail.net/hubfs/8813571/PERISCOPE_VULNINTEL_20250903.pdf; https://www.crowdstrike.com/en-us/blog/crowdstrike-falcon-blocks-git-vulnerability-cve-2025-48384/; http
No public exploits indexed.
arXiv
From LLMs to Agents: A Comparative Evaluation of LLMs and LLM-based Agents in Security Patch Detection
arxiv_fulltext·2025-11-11
From LLMs to Agents: A Comparative Evaluation of LLMs and LLM-based Agents in Security Patch Detection
From LLMs to Agents: A Comparative Evaluation of LLMs and LLM-based Agents in Security Patch Detection
Junxiao Han, Zheng Yu, Lingfeng Bao, Jiakun Liu, Yao Wan, Jianwei Yin, Shuiguang Deng, and Song Han
Junxiao Han, Zheng Yu, and Song Han are with the School of Computer and Computing Science, Hangzhou City University, Hangzhou 310015, China. E-mail: [email protected], [email protected], and [email protected]
Lingfeng Bao is with the State Key Laboratory of Blockchain and Data Security, Zhejiang University, Hangzhou 310027, China. E-mail: [email protected]
Jiakun Liu is with the Faculty of Computing, Harbin Institute of Technology, Harbin 150001, China. E-mail: [email protected]
Yao Wan is with the College of Computer Science and Technology, Huazhong University of Science and T
CTF
FesseMisk / README
ctf_writeups·2025·CVSS 5.3
CVE-2025-30208 [MEDIUM] FesseMisk / README
# CVE-Safari
**FesseMisk by HAL50000**
## Initial Reconnaissance
Every boot2root starts with nmap. I always run `nmap -T5 -A IP -vv` because I'm impatient and like my scans aggressive.
**NMAP Results:**
```
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 9.6p1 Ubuntu 3ubuntu13.14
5173/tcp open unknown
```
Port 5173 showed Vite configuration errors and blocked requests in the fingerprint.
## Step 1: Alpha User (Vite CVE-2025-30208)
Checked out port 5173 and found it was running **Vite v6.2.1**:
```bash
curl -v http://10.128.8.84:5173/
# Output shows: VITE v6.2.1
```
From the challenge context, I guessed there's a CVE from 2025 in that Vite version.
**EXPERT LEVEL GOOGLE DORKING INCOMING:** I found basically all POCs in this challenge by typing `THING CVE-2025 poc github`. Sign u
Talos
Link up, lift up, level up
blogs_talos·2025-08-28
Link up, lift up, level up
Welcome to this week’s edition of the Threat Source newsletter.
As summer retreats into the rear-view mirror, I’d like to take a moment to reflect on one of my favorite things about the cybersecurity profession: the community. Earlier this month, I attended Black Hat USA 2025 and DEF CON 33 in scalding hot Las Vegas, NV. We often refer to it as “hacker summer camp,” where all the security nerds of various stripes congregate to eat, drink, party, hack and reforge or make new bonds of fellowship with other awesome hackers. Hacker summer camp is, simply put, a whirlwind of activity, from the talks to see, villages to visit, parties to attend, and knowledge to gain. In 5 days, I think I walked almost 30 miles. By the end I was exhausted, but happy to have learned so much and see many of my ha
Talos
Link up, lift up, level up
blogs_talos·2025-08-28
Link up, lift up, level up
## Link up, lift up, level up
Welcome to this week’s edition of the Threat Source newsletter.
As summer retreats into the rear-view mirror, I’d like to take a moment to reflect on one of my favorite things about the cybersecurity profession: the community. Earlier this month, I attended Black Hat USA 2025 and DEF CON 33 in scalding hot Las Vegas, NV. We often refer to it as “hacker summer camp,” where all the security nerds of various stripes congregate to eat, drink, party, hack and reforge or make new bonds of fellowship with other awesome hackers. Hacker summer camp is, simply put, a whirlwind of activity, from the talks to see, villages to visit, parties to attend, and knowledge to gain. In 5 days, I think I walked almost 30 miles. By the end I was exhausted, but happy to have learne
Bleepingcomputer
CISA warns of actively exploited Git code execution flaw
blogs_bleepingcomputer·2025-08-26·CVSS 5.1
[MEDIUM] CISA warns of actively exploited Git code execution flaw
## CISA warns of actively exploited Git code execution flaw
## Bill Toulas
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is warning of hackers exploiting an arbitrary code execution flaw in the Git distributed version control system.
The agency has added the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog and has set the patch deadline for federal agencies to September 15th.
Git version control system allows software development teams to track codebase changes over time. The library is the backbone of modern software collaboration, serving as the basis for platforms such as GitHub, GitLab, and Bitbucket.
The exploited vulnerability in Git has a high-severity score and is tracked as CVE-2025-48384 . It stems from Git's mishandling of carriage return
Wiz
Crying Out Cloud Newsletter - August 2025 | Wiz
blogs_wiz·2025-08-10·CVSS 9.0
[CRITICAL] Crying Out Cloud Newsletter - August 2025 | Wiz
Welcome back! This month we’ve seen a lot of action, with both vulnerabilities and security incidents that have left users affected. We bring you the latest cloud security highlights, to help you stay informed and stay secure. Let's dive in.
## 🔍 Highlights
## Soco404 Cryptomining Campaign Exploits PostgreSQL and Cloud Misconfigurations
Wiz Research has uncovered the Soco404 campaign. A sophisticated, multi-platform cryptomining operation targeting cloud environments through exposed PostgreSQL instances, vulnerable Apache Tomcat servers, and other misconfigurations. The campaign delivers Linux and Windows payloads via fake 404 error pages embedded with base64 malware hosted on compromised or deceptive websites, including Google Sites and fraudulent crypto platforms. The attackers use a
Crowdstrike
CrowdStrike Falcon Blocks Git Vulnerability CVE-2025-48384
blogs_crowdstrike·CVSS 8.0
CVE-2026-20929 [HIGH] CrowdStrike Falcon Blocks Git Vulnerability CVE-2025-48384
STARDUST CHOLLIMA Likely Compromises Axios npm Package Apr 01, 2026
Falcon for IT Supports Windows Secure Boot Certificate Lifecycle Management Apr 01, 2026
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse Mar 31, 2026
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem Mar 25, 2026
STARDUST CHOLLIMA Likely Compromises Axios npm Package Apr 01, 2026
Falcon for IT Supports Windows Secure Boot Certificate Lifecycle Management Apr 01, 2026
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse Mar 31, 2026
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem Mar 25, 2026
Video Highlights the 4 Key Steps to Successful Incident Response Dec 02, 2019
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VI
Recorded Future
August 2025 CVE Landscape
blogs_recorded_future·CVSS 8.8
[HIGH] August 2025 CVE Landscape
# August 2025 CVE Landscape
In August 2025, Recorded Future’s Insikt Group® identified eighteen high-impact vulnerabilities that should be prioritized for remediation. This represents a decrease from the 22 identified in July.
However, the number of Very Critical vulnerabilities has remained the same (16) compared to July. These vulnerabilities have affected the following vendors: Trend Micro, WinRAR, N-able, Cisco, Apple, Citrix, FreePBX, Git, Microsoft, D-Link, and Fortinet.
August was dominated by Citrix and D-Link flaws, which represented six of the eighteen vulnerabilities. Threat actors actively exploited Citrix NetScaler ADC, NetScaler Gateway, and Citrix Session Recording products, as well as D-Link DNR-322L and DCS-2530L routers.
Recorded Future Insikt Group’s CVE Findings fro
Bugzilla
CVE-2025-48384 git: Git arbitrary code execution
bugzilla·2025-07-08·CVSS 8.0
CVE-2025-48384 [HIGH] CVE-2025-48384 git: Git arbitrary code execution
CVE-2025-48384 git: Git arbitrary code execution
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed afte
Bugzilla
CVE-2025-48384 cgit: Git arbitrary code execution [fedora-42]
bugzilla·2025-07-08·CVSS 8.0
CVE-2025-48384 [HIGH] CVE-2025-48384 cgit: Git arbitrary code execution [fedora-42]
CVE-2025-48384 cgit: Git arbitrary code execution [fedora-42]
More information about this security flaw is available in the following bug:
https://bugzilla.redhat.com/show_bug.cgi?id=2378806
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '42'.
Package Maintainer: If you
https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9http://seclists.org/fulldisclosure/2025/Sep/60http://www.openwall.com/lists/oss-security/2025/07/08/4https://lists.debian.org/debian-lts-announce/2025/10/msg00003.htmlhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48384
2025-07-08
Published
2025-08-25
Added to CISA KEV
Exploited in the wild