-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from passing client-controlled environment variables to git subprocesses. The commit diff shows removal of code in gitRunE that appended session.Environ() to git's execution environment. This matches the vulnerability description about environment variable propagation being the root cause. The gitRunE function was responsible for executing git commands with unsafe environment variables prior to the patch.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/charmbracelet/soft-serve | go | < 0.7.5 | 0.7.5 |
A Semantic Attack on Google Gemini - Read the Latest Research