Isomorphic-Git

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.CVE-2021-30483Isomorphic-Git · 2.2% likely

   CWE-22

2. isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)CVE-2026-63395isomorphic-git · CVSS 8.8 · 0.7% likely

   CWE-22

3. isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfoCVE-2026-89011isomorphic-git · CVSS 7.1 · 0.4% likely

   CWE-1321

4. isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)CVE-2026-63475isomorphic-git · CVSS 4.3 · 0.4% likely

   CWE-674

5. isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkoutCVE-2026-63478isomorphic-git · CVSS 5.3 · 0.3% likely

   CWE-22

6. isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)CVE-2026-63476isomorphic-git · CVSS 4.3 · 0.3% likely

   CWE-789

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.