Known vulnerabilities in Sourcetree for macOS
Vendor:
Atlassian
Software:
Sourcetree for macOS
Software CPE:
cpe:2.3:a:atlassian:sourcetree_for_macos:*:*:*:*:*:*:*:*
Website:
https://www.atlassian.com
Total vulnerabilities:
5
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
4.2.19
3.4.12
3.4.11
3.4.10
3.4.9
3.4.8
3.4.7
3.4.6
3.4.5
3.4.4
3.4.3
3.4.2
3.4.1
3.4.0
3.4.13
4.2.18
4.2.17
4.2.16
4.2.15
4.2.14
4.2.13
4.2.12
4.2.11
4.2.10
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.2
4.0.1
4.0
3.2.1
3.1.2
3.1.1
3.1b1
3.1.0
3.0b7
3.0b6
3.0b5
3.0b4
3.0b3
3.0b2
3.0b1
3.0.1
3.0
2.7b3
2.7b2
2.7b1
2.7.6
2.7.5
2.7.4
2.7.3
2.7.2b2
2.7.2
2.7.1b2
2.7.1b1
2.7
2.6.3
2.6.2
2.6.1
2.6
2.5.3
2.5.2
2.5.1
2.5
2.4.7.0
2.4.1
2.4
2.3.2
2.3.1
2.3
2.2.4
2.2.3
2.2.2
2.2.1
2.2
2.1
2.0.5.8
2.0.5.7
2.0.5.6
2.0.5.5
2.0.5.4
2.0.5.2
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.9.8
1.9.7
1.9.6
1.9.5.2
1.9.5.1
1.9.5
1.9.4.1
1.9.4
1.9.3.1
1.9.3
1.9.2
1.9.1
1.9.0
1.8.3
1.8.2
1.8.1
1.8.0.3
1.8.0.2
1.8.0.1
1.8.0
1.7.5
1.7.4.1
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.4.1
1.6.3.1
1.6.2.2
1.6.2.1
1.6.2
1.6.1
1.6.0b3
1.6.0b2
1.6.0b1
1.6.0.1
1.6.0
1.6
1.5.8
1.5.7.1
1.5.7
1.5.6
1.5.5.1
1.5.5
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0b1
1.5.0
1.4.4
1.4.3
1.4.2
1.4.1.1
1.4.1
1.4.0b1
1.4.0
1.3.4
1.3.3
1.3.2
1.3.1.1
1.3.1
1.3.0b3
1.3.0b2
1.3.0b1
1.3.0
1.2.9.1
1.2.9
1.2.8.1
1.2.8
1.2.4
1.2.3
1.2.2
1.2.1
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139072 - Improper Access Control CVE-2026-21575 |
CWE-284 | High | 3.4.13 | 22.07.2026 |
SB2026072225 |
||
| #VU100675 - Improper input validation CVE-2024-21697 |
CWE-20 | High | 4.2.9 | 19.11.2024 |
SB2024111986 |
||
| #VU82587 - Improper input validation CVE-2023-22514 |
CWE-20 | High | 4.2.5 | 31.10.2023 |
SB2023103140 |
||
| #VU27258 - Insufficiently Protected Credentials CVE-2020-5260 |
CWE-522 | Medium | 4.0.2 | 23.04.2020 |
SB2020042343 SB2020042344 SB2020042345 and 27 more |
||
| #VU18054 - Improper Control of Generation of Code ('Code Injection') CVE-2018-20234 |
CWE-94 | Medium | 3.1.1 | 22.03.2019 |
SB2019030815 |