CVE-2026-112818: git-annex cross-repository data exfiltration
seclists.orgoss-sec: CVE-2026-112818: git-annex cross-repository data exfiltrationPosted by Joey Hess on Oct 26 I have released git-annex 10.20261026, which fixes a cross-repository
data exfiltration attack.
https://git-annex.branchable.com/download/
There are also backported patches for several past versions available
as branches in the git repository:
CVE-2026-112818-patch-10.20250416
CVE-2026-112818-patch-10.20251029
CVE-2026-112818-patch-10.20261006...
1 repost2 likes