TI-2015-07382 CVE-2015-8969 · GHSA-mf6w-45cf-qhmp
Command injection in git-fastclone ruby gem All versions before 1.0.5
Priority MEDIUM 50
git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command.
No Squareup vulnerabilities are listed in CISA KEV.
2 records in Git-fastclone · all components
git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command.
git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules.