Approved changes feed: RSS · Atom
cpe:2.3:a:j6t:git-gui:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | J6T (b3427b5a-c081-5063-abc4-eb4d72792acd) |
|---|---|
| Product | Git Gui (10a936c7-28e6-5fe3-b21f-50c0727c92e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-46835 |
vulnerable | 2026-06-08 07:27:08.949949 |
Git GUI can create and overwrite files for which the user has write permission
HIGH (8.5)
Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.
Published: 2025-07-10T15:09:42.735Z
Updated: 2025-11-04T21:10:52.169Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46334 |
vulnerable | 2026-06-08 07:27:08.073218 |
Git GUI malicious command injection on Windows
HIGH (8.6)
Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable always includes the current directory. The mentioned programs are invoked when the user selects Git Bash or Browse Files from the menu. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.
Published: 2025-07-10T15:06:12.757Z
Updated: 2025-11-04T21:10:48.281Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.