Git-pull-or-clone vulnerabilities
We track 1 vulnerability in Git-pull-or-clone products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Git-pull-or-clone vulnerabilities
- 9.8 Critical severity
git-pull-or-clone: Improper Neutralization of Argument Delimiters in a Command
The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn(). However, the outpath p