The Git community has disclosed a security vulnerability affecting the and commands that could enable remote code execution when vulnerable machines access malicious repositories. The vulnerability, which has been assigned CVE–2018–17456 by Mitre, has been fixed in Git 2.19.1.

Read full news article on InfoQ