libgit2-sys (crates.io) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the crates.io package libgit2-sys, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2024-24577 — CVSS 8.6 (high): libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git…
• CVE-2024-24575 — CVSS 7.5 (high): libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git…
• CVE-2023-22742 — CVSS 5.3 (medium): libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2…