Git for Windows 2.56.1 closes clone-time code execution flaw
Johannes Schindelin's release fixes six security bugs, including remote code execution on recursive clones and path traversal through an unborn HEAD.
By segfault#remote-code-execution
VS Code trusted remote workspaces before users decided
Versions through 1.145.2 could start processes from an HTTP or HTTPS workspace file; 1.145.3 requires an explicit trust decision.
By renderGit ships security fixes, including a recursive-clone code execution bug
Junio C Hamano published Git 2.56.1 and matching updates on older maintenance lines, covering six CVEs.
By segfaultNode.js patches Brotli RCE that spreads far past the runtime
A high-severity out-of-bounds write in Google's shared compression library, fixed in Node 22, 24, and 26, also reaches Envoy, browsers, and dozens of other consumers.
By tarpitZDI flags CVSS 9.0 race-condition RCE in Linux KSMBD
A protocol-handler mismatch between request enqueue and dequeue can leak kernel heap memory and open an out-of-bounds write path.
By oops