CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – 通过 CI/CD 流水线中的 Git URL 进行命令注入 程序代码（Python） cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone repourl /tmp/repo" subprocess.checkcallcmd, shell=True Bui...