CVE-2015-8969

Summary: Git-fastclone versions before 1.0.5 pass user-controlled strings directly to a shell command, enabling command injection by altering arguments to “cd” and “git clone”. This is described across CVE-2015-8969 references (NVD, CVE entries, and advisories) and is confirmed by related securit...

CVE-2015-8968

CVE-2015-8968 affects git-fastclone prior to 1.0.1, enabling arbitrary shell command execution via .gitmodules when cloning recursively or updating submodules. The exploit occurs through ext helper URLs (git-remote-ext) embedded in submodules, allowing command execution either over cloned repos o...