An issue was found in Git before v2.24.1 v2.23.1 v2.22.2 v2.21.1 v2.20.2 v2.19.3 v2.18.2 v2.17.3 v2.16.6 v2.15.4 and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names allowing very targeted attacks via remote code execution in recursive clones.