{"action":"Upgrade git to 2.39.2-r0 or later.","affected":[{"fixed":"2.39.2-r0","introduced":"2.31.0"}],"component":"git","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.19","exploited":false,"fixed_versions":["2.39.2-r0"],"id":"tcs_01M5NEKJ4R986JRDPEYCDTHM25","modified_at":"2026-10-23T17:17:56.721163440Z","published_at":"2023-02-14T20:15:17.457Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2023-23946","https://security.alpinelinux.org/vuln/CVE-2023-23946"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2023-23946#Alpine:v3.19/git","url":"https://osv.dev/vulnerability/ALPINE-CVE-2023-23946"}],"summary":"Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git"}