VDB
CVE-2025-61659
CVE-2025-61659
PUBLISHED
CVSS 6.800000190734863 MEDIUM
bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.
EPSS 0.14% · 3.4th percentile
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
EPSS Score
0.14%
3.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| magicmonty | bash-git-prompt | 2.6.1 |
Timeline
- Sep 29, 2025 CVE Published
- Sep 30, 2025 EPSS Score
- Oct 7, 2025 EPSS Score
- Oct 14, 2025 EPSS Score
- Oct 15, 2025 CVE Updated
- Oct 21, 2025 EPSS Score
- Oct 28, 2025 EPSS Score
- Nov 3, 2025 EPSS Score
- Nov 10, 2025 EPSS Score
- Nov 17, 2025 EPSS Score
- Nov 24, 2025 EPSS Score
- Dec 1, 2025 EPSS Score