#command-injection

1 article

Beware: Goose `goose review` Executes Arbitrary Commands via Malicious Git Config

GHSA-r5pp-p5r8-466r is a high-severity flaw in Goose versions before 1.44.0 that lets a malicious repository run arbitrary code on…