libgit2

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer over…CVE-2018-10887libgit2 · 2.1% likely

   CWE-194

2. A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading a binary delta file.…CVE-2018-10888libgit2 · 1.8% likely

   CWE-125

3. libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`CVE-2024-24577libgit2 · CVSS 8.6 · 1.5% likely

   CWE-122

4. libgit2 is vulnerable to a denial of service attack in `git_revparse_single`CVE-2024-24575libgit2 · CVSS 7.5 · 1.4% likely

   CWE-400

5. libgit2 Shell Command Injection via ssh_libssh2 BackendCVE-2026-5917libgit2 · CVSS 8.8 · 1.4% likely

   CWE-78

6. libgit2 fails to verify SSH keys by defaultCVE-2023-22742libgit2 · CVSS 5.3 · 0.6% likely

   CWE-347

7. libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_dataCVE-2026-53587libgit2 · CVSS 7.5 · 0.5% likely

   CWE-126

8. libgit2: Unbounded Memory Allocation via Delta Object Result-Size HeaderCVE-2026-53585libgit2 · CVSS 5.3 · 0.4% likely

   CWE-770

9. libgit2: Submodule path traversalCVE-2026-53584libgit2 · CVSS 4.3 · 0.3% likely

   CWE-22

10. libgit2: HTTP transport can leak credentials to an offsite redirect targetCVE-2026-53586libgit2 · CVSS 6.5 · 0.3% likely

    CWE-200

11. libgit2: Inverted IP SubjectAltName Comparison in OpenSSL BackendCVE-2026-53583libgit2 · CVSS 6.5 · 0.2% likely

    CWE-297

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.