[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwiECjvTuylUw1yUyJPF1nS7Q8CLDsqTfSlSIhWf611o":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":41,"topProductsByCves":42,"seoMetadata":44,"meta":53},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":10,"lastCveUpdate":12,"firstLetter":13,"products":14,"description":18},12237,"gitforwindows",1,3,0,"2022-07-12","g",[15],{"id":16,"product_name":17,"version_count":10,"cve_count":10,"kev_count":11,"last_cve_update":12},50251,"git","Gitforwindows is a technology vendor with 1 tracked product and 3 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,36],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2018-11235","In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs \"git clone --recurse-submodules\" because submodule \"names\" are obtained from this file, and then appended to $GIT_DIR\u002Fmodules, leading to directory traversal with \"..\u002F\" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.","2018-05-30",7.8,"v3.0","High",false,0.48062,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":35},"CVE-2021-46101","In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.","2022-01-31",7.5,"v3.1",0.01403,{"cveId":37,"description":38,"publishedDate":12,"cvssScore":39,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":40},"CVE-2022-31012","Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into `C:\\mingw64\\bin\\git.exe` by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is included in version 2.37.1. Two workarounds are available. Create the `C:\\mingw64` folder and remove read\u002Fwrite access from this folder, or disallow arbitrary authenticated users to create folders in `C:\\`.",7.3,0.00394,[],[43],{"id":16,"product_name":17,"version_count":10,"cve_count":10,"kev_count":11,"last_cve_update":12},{"title":45,"metaDescription":46,"keywords":47,"structuredData":48},"Gitforwindows - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Gitforwindows covering 1 product with 3 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Gitforwindows vulnerabilities, Gitforwindows security, Gitforwindows CVE, Gitforwindows threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":49,"@type":50,"name":51,"description":46,"url":52},"https:\u002F\u002Fschema.org","Organization","Gitforwindows","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fgitforwindows",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":54,"apiVersion":55},"2026-10-18T17:26:09.378Z","3.0"]