git security

  1. CVE-2026-32631: NTLM Hash Leakage via Git Clone and MSRC Confidence

    Microsoft’s handling of CVE-2026-32631 highlights an important but often overlooked part of vulnerability management: the difference between a bug that exists in theory and one that is confirmed enough to justify immediate defensive attention. In this case, the advisory centers on GitHub-related...
  2. CVE-2017-14867: Git CVSServer OS Command Injection and Patch Guide

    Git’s cvsserver subcommand contained a dangerous, long-lived flaw: unsafe Perl scripts allowed shell metacharacters in a module name to become OS commands, enabling remote command execution — a vulnerability tracked as CVE-2017-14867 that affected multiple Git release lines and was reachable...