Known vulnerabilities in Sourcetree for Windows

Vendor: Atlassian
Software CPE: cpe:2.3:a:atlassian:sourcetree_for_windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Sourcetree for Windows Sourcetree for Windows is affected by 6 known vulnerabilities: 4 high, 2 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139072 - Improper Access Control
CVE-2026-21575
CWE-284 High
No
No
3.4.13 22.07.2026 SB2026072225
#VU100675 - Improper input validation
CVE-2024-21697
CWE-20 High
No
No
3.4.20 19.11.2024 SB2024111986
#VU82587 - Improper input validation
CVE-2023-22514
CWE-20 High
No
No
3.4.15 31.10.2023 SB2023103140
#VU27258 - Insufficiently Protected Credentials
CVE-2020-5260
CWE-522 Medium
Available
No
3.3.9 23.04.2020 SB2020042343
SB2020042344
SB2020042345
and 27 more
#VU18054 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-20234
CWE-94 Medium
No
No
3.0.17 22.03.2019 SB2019030815
#VU12313 - Argument Injection or Modification
CVE-2018-5226
CWE-88 High
No
No
- 01.05.2018 SB2018050101