{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-21T20:58:13.127","vulnerabilities":[{"cve":{"id":"CVE-2025-48386","sourceIdentifier":"security-advisories@github.com","published":"2025-07-08T19:15:43.410","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), leading to potential buffer overflows. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1."},{"lang":"es","value":"Git es un sistema de control de versiones distribuido, rápido y escalable con un conjunto de comandos excepcionalmente completo que proporciona operaciones de alto nivel y acceso completo a los componentes internos. El asistente de credenciales wincred utiliza un búfer estático (target) como clave única para almacenar y comparar con el almacenamiento interno. Este asistente de credenciales no realiza una comprobación de los límites adecuada del espacio disponible en el búfer antes de añadir datos con wcsncat(), lo que puede provocar desbordamientos del búfer. Esta vulnerabilidad está corregida en las versiones v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1 y v2.50.1."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":4.0}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"references":[{"url":"https://github.com/git/git/security/advisories/GHSA-4v56-3xvj-xvfr","source":"security-advisories@github.com"},{"url":"http://www.openwall.com/lists/oss-security/2025/07/08/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}