Firetruck

CVE-2025-48384

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
gitgit / git< 2.43.7affected
gitgit / git>= 2.44.0-rc0, < 2.44.4affected
gitgit / git>= 2.45.0-rc0, < 2.45.4affected
gitgit / git>= 2.46.0-rc0, < 2.46.4affected
gitgit / git>= 2.47.0-rc0, < 2.47.3affected
gitgit / git>= 2.48.0-rc0, < 2.48.2affected
gitgit / git>= 2.49.0-rc0, < 2.49.1affected
gitgit / git>= 2.50.0-rc0, < 2.50.1affected