There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Cygwin Git is a patch set for the git command line tool for the cygwin environment. A specially crafted
    repository that contains symbolic links as well as files with backslash characters in the file name may
    cause just-checked out code to be executed while checking out a repository using Git on Cygwin. The
    problem will be patched in the Cygwin Git v2.31.1-2 release. At time of writing, the vulnerability is
    present in the upstream Git source code; any Cygwin user who compiles Git for themselves from upstream
    sources should manually apply a patch to mitigate the vulnerability. As mitigation users should not clone
    or pull from repositories from untrusted sources. CVE-2019-1354 was an equivalent vulnerability in Git for
    Visual Studio. (CVE-2021-29468)

  - In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run
    directly. (CVE-2021-46101)

An update of the git package has been released.

ID	Name	Product	Family	Published	Updated	Severity
404595	Alpine: git: security update to 0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
404595	Alpine: git: security update to 0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
252274	Photon OS 5.0: Git PHSA-2025-5.0-0590	Nessus	PhotonOS Local Security Checks	8/19/2025	10/14/2026	low
333673	Photon OS 5.0: Git PHSA-2025-5.0-91-0590	Nessus	PhotonOS Local Security Checks	8/10/2026	11/2/2026	low

Detections

Analytics

Plugins Search

high

high

low

low