There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Cygwin Git is a patch set for the git command line tool for the cygwin environment. A specially crafted
    repository that contains symbolic links as well as files with backslash characters in the file name may
    cause just-checked out code to be executed while checking out a repository using Git on Cygwin. The
    problem will be patched in the Cygwin Git v2.31.1-2 release. At time of writing, the vulnerability is
    present in the upstream Git source code; any Cygwin user who compiles Git for themselves from upstream
    sources should manually apply a patch to mitigate the vulnerability. As mitigation users should not clone
    or pull from repositories from untrusted sources. CVE-2019-1354 was an equivalent vulnerability in Git for
    Visual Studio. (CVE-2021-29468)

  - In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run
    directly. (CVE-2021-46101)

An update of the git package has been released.

ID	名稱	產品	系列	已發布	已更新	嚴重性
404595	Alpine: git: security update to 0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
404595	Alpine: git: security update to 0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
252274	Photon OS 5.0: Git PHSA-2025-5.0-0590	Nessus	PhotonOS Local Security Checks	2025/8/19	2026/10/14	low
333673	Photon OS 5.0: Git PHSA-2025-5.0-91-0590	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/11/2	low

偵測

搜尋 Plugin

high

high

low

low