CVE-2020-7630

CRITICAL

git-add-remote < 1.0.0 - OS Command Injection via Name Argument

Title source: llm

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.

Core 2

Core References

Various Sources x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 9.8

EPSS 0.0412

EPSS Percentile 89.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78

Status published

Products (2)

git-add-remote_project/git-add-remote < 1.0.0

npm/git-add-remote 0npm

Published Apr 02, 2020

Tracked Since Feb 18, 2026