RootCauseunvalidated
If filter commands (especially smudge/clean) are taken from repository-provided configuration during clone, Git may execute arbitrary commands on the client, enabling remote code execution. A malicious or newly updated commit could change filter definitions to run harmful commands before the user can inspect them.
b658571d-36ed-4c75-9202-f384c375665a
If filter commands (especially smudge/clean) are taken from repository-provided configuration during clone, Git may execute arbitrary commands on the client, enabling remote code execution. A malicious or newly updated commit could change filter definitions to run harmful commands before the user can inspect them.