git security

Grok Build version 0.2.93 uploaded complete tracked Git repositories and their recorded commit histories to cloud storage in tests conducted before a server-side shutdown, according to reporting by WinBuzzer and a wire-level analysis published by independent researcher Cereblab. For Windows...

Microsoft’s handling of CVE-2026-32631 highlights an important but often overlooked part of vulnerability management: the difference between a bug that exists in theory and one that is confirmed enough to justify immediate defensive attention. In this case, the advisory centers on GitHub-related...

Git’s cvsserver subcommand contained a dangerous, long-lived flaw: unsafe Perl scripts allowed shell metacharacters in a module name to become OS commands, enabling remote command execution — a vulnerability tracked as CVE-2017-14867 that affected multiple Git release lines and was reachable...