# Git-Scm vulnerabilities

> Git-Scm has 37 published vulnerabilities across 1 product in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Git, with 37. If you run Git-Scm software, patch the exploited flaws first.

Canonical page: https://www.precursorintelligence.com/vendors/git-scm

## At a glance

- **Published vulnerabilities:** 37
- **Known to be exploited:** 1
- **Products:** 1
- **Versions:** 657
- **Most recently added to the known-exploited list:** [CVE-2025-48384](https://www.precursorintelligence.com/what-is/cve-2025-48384), 25 August 2025. We keep watching the list.

## Which Git-Scm products have the most vulnerabilities?

- [Git](https://www.precursorintelligence.com/product/git-scm/git): 37 published vulnerabilities, 657 versions

Each product page lists its own known-exploited flaws.

## Which Git-Scm vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited, newest first:

- [CVE-2025-48384](https://www.precursorintelligence.com/what-is/cve-2025-48384): Git Link Following Vulnerability. High, CVSS 8.0, chance of use in 30 days 4.4%, known exploited since 25 August 2025.

## Which Git-Scm flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days):

- [CVE-2018-17456](https://www.precursorintelligence.com/what-is/cve-2018-17456): 97%, Critical (CVSS 9.8)
- [CVE-2021-21300](https://www.precursorintelligence.com/what-is/cve-2021-21300): 89%, High (CVSS 7.5)
- [CVE-2017-1000117](https://www.precursorintelligence.com/what-is/cve-2017-1000117): 78%, High (CVSS 8.8)
- [CVE-2022-23521](https://www.precursorintelligence.com/what-is/cve-2022-23521): 56%, Critical (CVSS 9.8)
- [CVE-2023-25652](https://www.precursorintelligence.com/what-is/cve-2023-25652): 52%, High (CVSS 7.5)
- [CVE-2018-11235](https://www.precursorintelligence.com/what-is/cve-2018-11235): 48%, High (CVSS 7.8)
- [CVE-2022-41903](https://www.precursorintelligence.com/what-is/cve-2022-41903): 44%, Critical (CVSS 9.8)
- [CVE-2017-14867](https://www.precursorintelligence.com/what-is/cve-2017-14867): 36%, High (CVSS 8.8)
- [CVE-2016-2324](https://www.precursorintelligence.com/what-is/cve-2016-2324): 18%, Critical (CVSS 9.8)

## All Git-Scm products we track

1 products with at least one tracked version, most vulnerabilities first:

- [Git](https://www.precursorintelligence.com/product/git-scm/git): 37 vulnerabilities, 657 versions

## Questions

### How many vulnerabilities does Git-Scm have?

Our catalogue lists 37 published vulnerabilities across 1 product and 657 versions from Git-Scm. The most recent Git-Scm flaw added to the known-exploited list is CVE-2025-48384, on 25 August 2025.

### Which Git-Scm vulnerabilities are being exploited?

1 Git-Scm vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2025-48384. The full list is on this page.

### Which Git-Scm product has the most vulnerabilities?

Git, with 37 published vulnerabilities. Its own page lists the ones known to be exploited.

### How do I get alerts for new Git-Scm vulnerabilities?

Create a Precursor Intelligence account and track the Git-Scm products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.

## Running Git-Scm?

Precursor Intelligence keeps checking for you:

- **Tell us what you run.** Pick your software from a list, or let us work it out from your website.
- **We match it to every flaw.** Over 400,000 published flaws, checked against your list.
- **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it.
- **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools.

Start free (no card, nothing to install): https://www.precursorintelligence.com/register
Book a demo: https://www.precursorintelligence.com/contact

