A flaw in Git can let a malicious repository run an attacker’s code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1.
The flaw, tracked as CVE-2026-111760, is an integer truncation in how Git handles its index. An
SOURCE:
Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting telecommunications providers, government organizations,
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of