git-daemon (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package git-daemon, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (24)

• CVE-2022-41903 — CVSS 9.8 (critical): Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This…
• CVE-2022-23521 — CVSS 9.8 (critical): Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be…
• CVE-2024-32002 — CVSS 9.0 (critical): Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with…
• CVE-2024-52005 — CVSS 8.8 (high): Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported…
• CVE-2025-48385: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations…
• CVE-2025-27614 — CVSS 8.6 (high): Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social…
• CVE-2025-46835 — CVSS 8.5 (high): Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into…
• CVE-2022-39260 — CVSS 8.5 (high): Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement…
• CVE-2024-32004 — CVSS 8.1 (high): Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a…
• CVE-2025-48384 — CVSS 8.0 (high) — actively exploited: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations…
• CVE-2022-29187 — CVSS 7.8 (high): Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is…
• CVE-2024-52006 — CVSS 7.5 (high): Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations…
• CVE-2023-25652 — CVSS 7.5 (high): Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and…
• CVE-2024-32465 — CVSS 7.3 (high): Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with…
• CVE-2023-29007 — CVSS 7.0 (high): Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and…
• CVE-2023-23946 — CVSS 6.2 (medium): Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7…
• CVE-2022-24765 — CVSS 6.0 (medium): Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines…
• CVE-2023-22490 — CVSS 5.5 (medium): Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7…
• CVE-2022-39253 — CVSS 5.5 (medium): Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5…
• CVE-2024-50349 — CVSS 4.7 (medium): Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations…
• CVE-2024-32021 — CVSS 3.9 (low): Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source…
• CVE-2024-32020 — CVSS 3.9 (low): Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up…
• CVE-2025-27613 — CVSS 3.6 (low): Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without…
• CVE-2023-25815 — CVSS 3.3 (low): In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to…