Vulnerabilities in isomorphic-git
5 resultsCVE-2026-63395HIGHisomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)EPSS 0.7%CVE-2026-89011HIGHisomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfoEPSS 0.4%CVE-2026-63475MEDIUMisomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)EPSS 0.4%CVE-2026-63478MEDIUMisomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkoutEPSS 0.3%CVE-2026-63476MEDIUMisomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)EPSS 0.3%