Critical Vulnerability in Git

Security updates have been released to address a critical vulnerability (CVE-2024-32002) affecting Git. The vulnerability has a Common Vulnerability Scoring System (CVSSv3.1) score of 9.1 out of 10.

Successful exploitation of the vulnerability could allow an attacker to execute arbitrary code when a victim unknowingly clones a malicious repository to access the files and code within. This could result in remote code execution.

The vulnerability affects all versions of Git prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4.

Users and administrators of affected versions of Git are advised to update to the latest version immediately.

More information is available here:

https://github.com/git/git/security/advisories/GHSA-8h77-4q3w-gfgv