漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Command Injection
Vulnerability Description
The package simple-git before 3.3.0 are vulnerable to Command Injection via argument injection. When calling the .fetch(remote, branch, handlerFn) function, both the remote and branch parameters are passed to the git fetch subcommand. By injecting some git options it was possible to get arbitrary command execution.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
simple-git-hooks 参数注入漏洞
Vulnerability Description
simple-git-hooks是一个应用软件。一个简单的git钩子经理小型项目 simple-git-hooks 中存在参数注入漏洞，该漏洞源于当调用 .fetch(remote, branch, handlerFn) 函数时，remote 和 branch 参数都被传递给 git fetch 子命令。通过注入一些 git 选项，可以执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A