gitbutlerapp/gitbutler

gitbutlerapp/gitbutler

GitHubGitHub
GitHubgithub.com
gitbutler.comgitbutler.com
Releases2.24K
Frequency12 hours
Last Release
Stars20.9K
The GitButler version control client, backed by Git, powered by Tauri/Rust/Svelte
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-45261↗
——

GitButler is a modern Git-based version control interface for AI-powered workflows. Prior to 0.19.7, a emote code execution vulnerability exists in the Tauri-based GitButler desktop application. An attacker can inject a malicious link in a pull request body, which if clicked by the user allows for arbitrary script execution in the Tauri webview. Users that have not enabled forge integration are not at risk. This vulnerability is fixed in 0.19.7.