git for windows project vulnerabilities

Recent CVEs affecting git for windows project products. 5 tracked.

git for windows project has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-04-25. Highest priority: CVE-2023-23618 (score 38/100).

• CVE-2023-29012 HIGH 7.2 UPGRADE Git for Windows is the Windows port of Git
• CVE-2023-29011 HIGH 7.5 UPGRADE Git for Windows, the Windows port of Git, ships with an executable called `connect.exe`, which implements a SO
• CVE-2023-25815 LOW 3.3 UPGRADE MITIGATE In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer
• CVE-2023-23618 HIGH 8.6 UPGRADE Git for Windows is the Windows port of the revision control system Git
• CVE-2023-22743 HIGH 7.2 UPGRADE Git for Windows is the Windows port of the revision control system Git

FAQ

How do I fix git for windows project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is git for windows project being exploited right now?

None of the tracked git for windows project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which git for windows project CVE should I patch first?

CVE-2023-23618 currently ranks highest (38/100): Git for Windows is the Windows port of the revision control system Git.

Products

• git for windows

RSS feed for git for windows project · ← Back to latest CVEs