VDB
CVE-2025-61659
CVE-2025-61659
PUBLISHED
CVSS 6.800000190734863 MEDIUM
bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.
EPSS 0.14% · 3.8th percentile
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
EPSS Score
0.14%
3.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| magicmonty | bash-git-prompt | 2.6.1 |
Timeline
- Sep 29, 2025 CVE Published
- Sep 30, 2025 EPSS Score
- Oct 7, 2025 EPSS Score
- Oct 13, 2025 EPSS Score
- Oct 15, 2025 CVE Updated
- Oct 20, 2025 EPSS Score
- Oct 27, 2025 EPSS Score
- Nov 3, 2025 EPSS Score
- Nov 9, 2025 EPSS Score
- Nov 16, 2025 EPSS Score
- Nov 23, 2025 EPSS Score
- Nov 30, 2025 EPSS Score