Incorrect quoting of command-line arguments allowed remote code execution during a recursive clone in conjunction with SSH URLs.
Incorrect quoting of command-line arguments allowed remote code execution during a recursive clone in conjunction with SSH URLs.
https://github.com/git/git/commit/6d8684161ee9c03bed5cb69ae76dfdddb85a0003 https://lkml.org/lkml/2019/12/10/905