High WID-SEC-2026-4455 5 CVEs

git: Mehrere Schwachstellen

Published Nov 10, 2026 · Updated Nov 12, 2026 · Revision 3 · de

Vendor: amazon Product: Linux 2 Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in git ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um Dateien zu manipulieren.

Product

Git ist eine freie Software zur verteilten Versionsverwaltung von Dateien.

Vulnerabilities 5

High 7.5

CVE-2026-105437 Public exploit

Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger…

git-for-windows git rust git Debian Ubuntu Azure Linux Alpine

Nov 10, 2026
Medium 4.4

CVE-2026-114466

Arbitrary data can be read or written through git-fast-import(1) and git-fast-export(1) features not marked unsafe

git-for-windows git git git Debian Ubuntu Alpine

Nov 12, 2026
Medium 4.4

CVE-2026-114469

Out-of-bounds read can crash git-apply(1) when binary patch inflates to very large size

git-for-windows git git git Debian Ubuntu Alpine

Nov 12, 2026
Low 3.3

CVE-2026-113408 Public exploit

Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository

git-for-windows git git git Debian Ubuntu Alpine

Nov 12, 2026
Low 3.3

CVE-2026-114467

Out-of-bounds write possible in Git when git-merge(1) used on tag with more than two GPG signatures

git-for-windows git git git Debian Ubuntu Alpine

Nov 12, 2026

Revision history

2026-11-12 #3
Neue Updates von European Union Vulnerability Database und Amazon aufgenommen
2026-11-11 #2
Referenz(en) aufgenommen: EUVD-2026-124323
2026-11-10 #1
Initiale Fassung

References

Git security vulnerabilities announced vom 2026-11-10
https://github.blog/open-source/git/git-security-vulnerabilities-announced-7/
Amazon Linux Security Advisory ALAS2-2026-4109 vom 2026-11-12
https://alas.aws.amazon.com/AL2/ALAS2-2026-4109.html