https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 11:00:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-164364 EUVD-2026-164364 https://cve.radiocsirt.org/vuln/euvd-2026-164364 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25866 <p>The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $refs = NULL) function, both the url and refs parameters are passed to the git ls-remote subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> <p>The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $refs = NULL) function, both the url and refs parameters are passed to the git ls-remote subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25866 https://cve.radiocsirt.org/vuln/ghsa-3xpw-vhmv-cw7h <p><strong>Affected:</strong> Packagist: czproject/git-php</p> <p>The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $refs = NULL) function, both the url and refs parameters are passed to the git ls-remote subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> <p><strong>Affected:</strong> Packagist: czproject/git-php</p> <p>The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $refs = NULL) function, both the url and refs parameters are passed to the git ls-remote subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> https://cve.radiocsirt.org/vuln/ghsa-3xpw-vhmv-cw7h https://cve.radiocsirt.org/vuln/gsd-2022-25866 gsd-2022-25866 https://cve.radiocsirt.org/vuln/gsd-2022-25866