Beveiligingsadvies

CVE-2026-91986

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 15:18:28

Laatst bijgewerkt 2026-09-15 15:18:28

Toegewezen door VulnCheck

CVSS-score 5.4

Status PUBLISHED

Beschrijving

gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and logs.

← Alle CVE's bekijken Bekijk op cve.org ↗