Skip to content

CVE record · 1 source

CVE-2026-63395

CVSS 8.8

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.

Vendor: Isomorphic-Git
Product: isomorphic-git
CVSS v3.1: 8.8 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-22, CWE-59
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

35

CVE NVD 3h ago

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A…

CVSS 8.8 Fix available CVE-2026-63395 Isomorphic-Git