CyberSecBulletin

J6t vulnerabilities

We track 3 vulnerabilities in J6t products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2025.

3vulnerabilities
0critical
3high
0exploited
8.6average CVSS score

Latest J6t vulnerabilities

  • 8.5 High severity

    git-gui: Improper Neutralization of Argument Delimiters in a Command

    CVE-2025-46835J6t

    Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files f

  • 8.6 High severity

    git-gui: Improper Neutralization of Special Elements used in an OS Command

    CVE-2025-46334J6t

    Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looki

  • 8.6 High severity

    gitk: Improper Neutralization of Special Elements used in an OS Command

    CVE-2025-27614J6t

    Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script (e.g., Bourne shell, Perl, Python, ...