CVE-2026-111760:
Recursive clones are susceptible to Remote Code Execution: an
attacker-controlled repository can be crafted in a way that
exploits a bug in Git whereby Git can be fooled into overwriting
a gitfile (used for submodules) with a symbolic link that then
points to a directory with malicious config or hooks. The config
or hooks may have attacker-specified code.
CVE-2026-113408:
It is possible for a server to advertise an unborn HEAD that
contains path-traversal characters (e.g.,
`refs/heads/../../../TARGET`). With the files ref backend that
can lead to ref-updating actions to write to unwanted files.
CVE-2026-114466:
In response to CVE-2019-1348, `fast-import` disallows the
`export-marks` feature by default. The features
`rewrite-submodules-to` and `rewrite-submodules-from` as well as
the option `export-pack-edges` that were introduced in the
meantime also allow reading from arbitrary paths, and are
therefore now also disallowed by default.
CVE-2026-114467:
When Git strips the GPG signatures from a commit message, it only
accounts for two signatures. A commit message containing more
than two signatures therefore causes a stack memory corruption.
This can be triggered when using `git merge` with a tag which
contains more than two signatures, making way for a DoS attack
which can potentially also affect forges.
CVE-2026-114469:
Git rejects patches larger than ~1 GiB, but that check only
considered the size of the patch as it appears in the input,
which for binary patches is much smaller than the size of the
file the patch describes. A binary patch that inflates to a very
large size therefore slipped past the check and crashed Git with
an out-of-bounds read.
CVE-2026-105437:
When merging, Git computes the size of the buffer holding the
merge result in a way that can overflow for very large merges,
which can be triggered by a large number of conflicts combined
with a large `conflict-marker-size`. The resulting buffer can
then be too small, and Git writes past its end (and, before and
after that, before its start), corrupting the heap.