Skip to content

CVE record · 1 source

CVE-2026-124077

The GitIdentifiers class in Apache Commons Codec did not reject NUL bytes in tree entry names.

Vendor: Apache Software Foundation
Product: Apache Commons Codec
Weakness: CWE-158

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

20

CVE NVD 2h ago

The GitIdentifiers class in Apache Commons Codec did not reject NUL bytes in tree entry names.

The GitIdentifiers class in Apache Commons Codec did not reject NUL bytes in tree entry names. Because Git uses a NUL byte to mark the end of each entry name in a tree object, a crafted name could make one tree serialize to the…

Fix available CVE-2026-124077 Apache Software Foundation