Is the git binary where the vulnerability is... or is it in one of these:

  $ ls $(git --exec-path)