Skip to content
Heist/ feed
Back to feed
CriticalFix available

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer

Type: advisorySources: OSV

Security vulnerability affects the git package. In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer.

Products
git
Affected versions
Not specified
Fixed versions
2.40.1-r0
CVEs
CVE-2023-25815
Confirmed fixed CVEs
Not specified
Updated in this feed
28 Oct 2026, 09:51 UTC · Revision 1

Source evidence

In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer

core-osv · Original source

Published 30 Sept 2026, 18:21 UTC

Security vulnerability affects the git package. In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer.

osv:CLEANSTART-2026-EP87015

git

Fixed versions: 2.40.1-r0

Complete source record
{
  "id": "caa7902aad860b495b681e8f932029933d84c82a7d8b47efa29e893dc13fd8f7",
  "url": "https://osv.dev/vulnerability/CLEANSTART-2026-EP87015",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer",
    "summary": "Security vulnerability affects the git package. In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer.",
    "evidence": "osv:CLEANSTART-2026-EP87015",
    "products": [
      {
        "name": {
          "value": "git",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "2.40.1-r0",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "critical",
    "structured": {
      "id": "CLEANSTART-2026-EP87015",
      "aliases": [
        "CLEANSTART-2026-EP87015"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "2.40.1-r0"
                }
              ]
            }
          ],
          "package": {
            "name": "git",
            "purl": "pkg:apk/cleanstart/git",
            "ecosystem": "CleanStart"
          },
          "database_specific": {
            "source": "https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-EP87015.json"
          }
        }
      ],
      "modified": "2026-10-08T16:47:27.463418413Z",
      "provider": "osv",
      "upstream": [
        "CVE-2023-25815"
      ],
      "references": [
        "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EP87015.json",
        "https://osv.dev/vulnerability/CVE-2023-25815",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-25815"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2023-25815",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 103091,
  "published_at": "2026-09-30T18:21:03.713+00:00"
}