CVE-2022-25912

Name of the Vulnerable Software and Affected Versions simple-git versions prior to 3.15.0

Description The issue allows for Remote Code Execution (RCE) when the ext transport protocol is enabled, making it exploitable via the clone() method. This is due to an incomplete fix of a previous issue.

Recommendations For versions prior to 3.15.0, update to version 3.15.0 or later to resolve the issue. As a temporary workaround, consider disabling the ext transport protocol to minimize the risk of exploitation. Restrict access to the clone() method until the issue is resolved.