Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

4 matching records.

1. 35
   CVE NVD 3h ago

   isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.

   isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A…

   CVSS 8.8 Fix available CVE-2026-63395 Isomorphic-Git Developer platform
2. 28
   CVE NVD 3h ago

   isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.

   isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's tree parser in src/models/GitTree.js accepts a standalone .. tree-entry name because it rejects only path…

   CVSS 5.3 Fix available CVE-2026-63478 Isomorphic-Git Developer platform
3. 28
   CVE NVD 3h ago

   isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.

   isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git reads a server-controlled targetSize while applying a packfile delta in src/utils/applyDelta.js and passes it…

   CVSS 4.3 Fix available CVE-2026-63476 Isomorphic-Git Developer platform
4. 28
   CVE NVD 3h ago

   isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers.

   isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git persists server-supplied circular symref= capabilities through updateRemoteRefs, and GitRefManager.resolve()…

   CVSS 4.3 Fix available CVE-2026-63475 Isomorphic-Git Developer platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Isomorphic-Git&limit=100. RSS for this section: feed.xml.