seguranca

The GitSpawn Flaw Exposed Claude Code, Cursor, and Codex: Who Patched It and Who Hasn't

A flaw named GitSpawn lets coding agents run an attacker's command just by reading a repository's .git folder. Here's who has patched it, who hasn't, and what it teaches.