Threats affecting pkg:github/wangyihang/GitHacker

GitHacker versions 1.1.7 and earlier contain a path traversal vulnerability in the add_head_file_tasks function. This flaw allows an attacker-controlled ref path from .git/HEAD to cause the tool to read arbitrary local files when run against a malicious server URL. Although full file contents are not disclosed, the vulnerability enables an existence oracle for certain hexadecimal fragments. The issue is fixed in version 1.1.9.