Skip to content
OpenAdvisories

Package · RubyGems

git-fastclone

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    git-fastclone permits arbitrary shell command execution from .gitmodules

    git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an atta…