CLEANSTART-2024-GH44099

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-GH44099.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-GH44099
Upstream
Published
2026-10-31T14:31:42Z
Modified
2026-10-31T16:00:26Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'
Details

Security vulnerability affects the libgit2 package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.

References

Affected packages

CleanStart / libgit2

Package

Name
libgit2
Purl
pkg:apk/cleanstart/libgit2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.28.4-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-GH44099.json"