git-gui vulnerabilities

2 known vulnerabilities in git-gui from J6t. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  git-gui: Improper Neutralization of Argument Delimiters in a Command

  CVE-2025-46835Jul 10, 2025J6t

  Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files f

• 8.6 High severity

  git-gui: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-46334Jul 10, 2025J6t

  Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looki