Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
cleanstart libgit2 could be tricked into unsafe network connections
published 4 days ago
Summary
The libgit2 library used by cleanstart can mishandle certain web requests, potentially letting an attacker redirect or intercept data. This could expose confidential information or allow unwanted actions on your systems. Upgrade to the latest version of libgit2 as soon as possible to apply the fix.
What to do
- Update cleanstart libgit2 to version 0.25.1-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | libgit2 |
< 0.25.1-r0 Fix: upgrade to 0.25.1-r0
|
Original advisory text
http_connect function in transports/http
Security vulnerability affects the libgit2 package. The http_connect function in transports/http.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-EA74509 · OSV
Track software like this
Free during beta