Flight Log / yamadashy/repomix #581
fix(core): Fix command injection vulnerability in git clone — a Devin (Cognition) bot flight
The Devin bot (Cognition) opened this pull request in yamadashy/repomix on May 19, 2025; abandoned — closed unmerged with no human engagement: +513 −252, 20 files, 1 review.
Flown by
- Lines
- +513 −252
- Files
- 20
- Commits
- 3
- Reviews
- 1
- To merge
- —
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
From the pull request description
# Fix command injection vulnerability in git clone ## Description This PR fixes a command injection vulnerability in the `execGitShallowClone` function where URL parameters are passed directly to a git clone command, which could allow attackers to execute arbitrary commands using parameters like `-…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedKazuki Yamada
- —committedDevin AI
- —reviewed
- —committedDevin AI
- May 19, 2025closedyamadashy
Read next
Cite this flight: AgentRiders Flight Log, yamadashy/repomix#581, record updated Nov 3, 2026, https://agentriders.com/logs/yamadashy/repomix/581/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.