Download Latest Version
libgit2 v1.9.7 source code.zip (12.4 MB)
Get an email when there's a new version of libgit2
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| libgit2 v1.8.7 source code.tar.gz | 2026-08-13 | 7.7 MB | |
| libgit2 v1.8.7 source code.zip | 2026-08-13 | 12.3 MB | |
| README.md | 2026-08-13 | 647 Bytes | |
| Totals: 3 Items | 20.0 MB | 0 | |
v1.8.7
This is a security release with one change.
- Escape remote repository paths in libssh2
In v1.8.5, we started escaping repository paths in the OpenSSH-based exec ssh transport. Bring the same escaping to the libssh2 transport to avoid any potential command injection.
In addition, changes have been ported from the main branch to update CI builds.
Thank you to @izzy0101010101 for responsibly disclosing this issue to us, and thank you to @sgallagher for the fix. This bug was identified as CVE 2026-5917 by an unrelated third party.
Full Changelog: https://github.com/libgit2/libgit2/compare/v1.8.6...v1.8.7
