Gitahead vulnerabilities
We track 3 vulnerabilities in Gitahead products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2026.
Latest Gitahead vulnerabilities
- 8.8 High severity
gitahead: Improper Neutralization of Special Elements used in an OS Command
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path conta
- 7.5 High severity
gitahead: Improper Neutralization of Special Elements used in an OS Command
GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $(comman
- 7.5 High severity
GitAhead: Download of Code Without Integrity Check
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate o