1 result · Feed
-
Medium —
On Windows, `git-sizer` might run a `git` executable within the repository being analyzed
### Impact On Windows, if `git-sizer` is run against a non-bare repository, and that repository has an executable called `git.exe`, `git.bat`, etc., then that executable might be run by `git-sizer` rather than the system `git` executable. An attacker could tr…