| Package | Affected versions | Patched versions |
|---|---|---|
| git-fastclone | < 1.0.5 | 1.0.5 |
| git-fastclone | < 1.0.5 | 1.0.5 |
git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to cd and git clone commands in the library.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free