| Package | Affected versions | Patched versions |
|---|---|---|
| git | = 2.21.0= 2.23.0= 2.24.0≥ 2.14.0, < 2.14.6≥ 2.15.0, < 2.15.4≥ 2.16.0, < 2.16.6≥ 2.17.0, < 2.17.3≥ 2.18.0, < 2.18.2≥ 2.19.0, < 2.19.3≥ 2.20.0, < 2.20.2≥ 2.22.0, < 2.22.2 | 2.14.62.15.42.16.62.17.32.18.22.19.32.20.22.22.2 |
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free