Git patches two critical remote code execution security flaws

Cybersecurity researchers at X41 and GitLab have discovered three very serious vulnerabilities in the Git-distributed version control system.

The flaws could have allowed threat actors to execute arbitrary code on target endpoints by exploiting heap-based buffer overflow vulnerabilities, the researchers said. Of the three flaws, two have already been patched, while a workaround is available for the third.