CVE-2021-23632

CVE-2021-23632 affects all versions of the npm package git. The root cause is missing sanitization in the Git.git method, allowing input to execute OS commands rather than just git commands, enabling Remote Code Execution. The provided PoC demonstrates injecting commands via repo.git(input) to ru...

CVE-2015-7545

The CVE-2015-7545 issue affects Git’s remote helpers (notably git-remote-ext) and other remote helpers. Git prior to 2.3.10, 2.4.x prior to 2.4.10, 2.5.x prior to 2.5.4, and 2.6.x prior to 2.6.1 do not properly restrict allowed protocols, which could let remote attackers execute arbitrary code vi...

CVE-2015-7082

CVE-2015-7082 refers to multiple unspecified vulnerabilities in Git prior to 2.5.4, as used by Apple Xcode prior to 7.2. The connected document details a concrete root cause: a flaw in the git-remote-ext component that can be triggered by handling a specially crafted URL, enabling a remote attack...