Git patches two critical remote code execution security bugs

Cybersecurity researchers from X41 and GitLab have discovered three critical vulnerabilities in the Git distributed version control system.

The vulnerabilities could allow threat actors to run arbitrary code on target endpoints by exploiting heap-based buffer overflow vulnerabilities, the researchers say. Out of the three vulnerabilities, two already have patches, while the third has a workaround.