· zachyceno
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 7.5, CVEs: CVE-2026-113408, CVE-2026-114467, CVE-2026-114469, CVE-2026-105437, CVE-2026-114466, Summary: A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. The flaw,…
Git FI
CVE v události 6
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-105437 | – | – | – |
| CVE-2026-111760 | – | – | – |
| CVE-2026-113408 | – | – | – |
| CVE-2026-114466 | – | – | – |
| CVE-2026-114467 | – | – | – |
| CVE-2026-114469 | – | – | – |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.5.