In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly. References: https://github.com/0xADY/git_rce
Marking Services notaffected.
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2021-46101