Cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*

Dulwich versions before 1.2.5 are vulnerable to an arbitrary file write leading to remote code execution on Windows systems when cloning or checking out a malicious Git repository due to improper path validation, as tracked by CVE-2026-42305.