Known vulnerabilities in libgit2 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libgit2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libgit2 (Ubuntu package) libgit2 (Ubuntu package) is affected by 11 known vulnerabilities: 2 high, 5 medium, 4 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143594 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-5917
CWE-78 High
No
No
0.24.1-2ubuntu0.2+esm4, 0.26.0+dfsg.1-1.1ubuntu0.2+esm3, 0.28.4+dfsg.1-2ubuntu0.1+esm2, 1.1.0+dfsg.1-4.1ubuntu0.1+esm2, 1.7.2+ds-1ubuntu3.2, 1.9.1+ds-1ubuntu1.2 16.08.2026 SB20260816530
SB2026081711
SB2026081712
and 9 more
#VU138490 - Insufficiently Protected Credentials
CVE-2026-53586
CWE-522 Medium
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 20.07.2026 SB2026072079
SB2026072444
SB2026072445
and 10 more
#VU138489 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-53584
CWE-22 Low
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 20.07.2026 SB2026072079
SB2026072444
SB2026072445
and 10 more
#VU138487 - Out-of-bounds read
CVE-2026-53587
CWE-125 Medium
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 20.07.2026 SB2026072079
SB2026072444
SB2026072445
and 12 more
#VU138485 - Allocation of Resources Without Limits or Throttling
CVE-2026-53585
CWE-770 Medium
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 20.07.2026 SB2026072079
SB2026072444
SB2026072445
and 10 more
#VU14546 - Out-of-bounds read
CVE-2018-15501
CWE-125 Low
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 25.08.2018 SB2018082810
SB2018082811
SB2018102909
and 4 more
#VU11154 - Out-of-bounds read
CVE-2018-8098
CWE-125 Low
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 19.03.2018 SB2018030806
SB2018031236
SB2018031237
and 2 more
#VU11152 - Double Free
CVE-2018-8099
CWE-415 Low
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 19.03.2018 SB2018030806
SB2018102909
SB2018031236
and 3 more
#VU32000 - Memory corruption
CVE-2016-10128
CWE-119 High
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 24.03.2017 SB2017032404
SB2017012615
SB2017011506
and 5 more
#VU32001 - NULL Pointer Dereference
CVE-2016-10129
CWE-476 Medium
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 24.03.2017 SB2017032405
SB2017012616
SB2017011506
and 5 more
#VU32002 - Improper Access Control
CVE-2016-10130
CWE-284 Medium
No
No
0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1 24.03.2017 SB2017032406
SB2017012617
SB2017011506
and 5 more