git-pull-or-clone vulnerabilities
1 known vulnerability in git-pull-or-clone from Git-pull-or-clone. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
git-pull-or-clone: Improper Neutralization of Argument Delimiters in a Command
The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn(). However, the outpath p