2026年11月10日 14:23 ET 发布 · 更新于 4 天前 · 1 个来源
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
The Hacker News
·
原始报道
INFERY
A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. The flaw, tracked as CVE-2026-111760, is an integer truncation in how Git handles its index. An
原文