GHSA-8jmw-wjr8-2x66HighCVSS 8.1

Command injection in git-clone

Published
July 2, 2022
Last Modified
September 7, 2023

🔗 CVE IDs covered (1)

CVE-2022-25900 →

📋 Description

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git.

Credits

Credit to @lirantal for discovering this vulnerability.

🎯 Affected products1

  • npm/git-clone:<= 0.2.0

🔗 References (5)