CVE-2021-46101

CVE-2021-46101 affects Git for Windows up to version 2.34.1. The connected Red Hat and OSV entries corroborate the description: when using git pull to update the local repository, git.cmd can be run directly. The documents do not provide further root-cause technical details, affected subcomponent...

CVE-2022-31012

Git for Windows (a Windows-specific patch set of Git) contains a vulnerability tracked as CVE-2022-31012 where the installer can mistakenly execute a binary placed at C:\mingw64\bin\git.exe during a fresh install (not during upgrades). A fix was released in version 2.37.1. Workarounds include cre...