CVE record · 2 sources
CVE-2026-105437
CVSS 7.5Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger through a repository they…
- Vendor
- GIT
- Product
- Git
- CVSS v3.1
- 7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weakness
- CWE-122
- Exposure class
- Developer platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
GitLab Critical Patch Release: 19.5.4, 19.4.6, 19.3.8
On November 10, 2026, we released versions 19.5.4, 19.4.6, 19.3.8 for GitLab Community Edition and Enterprise Edition. These versions contain important bug and security fixes, and we strongly recommend that all self-managed…
-
Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger through a repository they…
Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger through a repository they control. When Git merges a file, it first adds up the size of the merged output…