https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:11:03.634001+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-17456 CVE-2018-17456 2026-09-28T13:11:04.704652+00:00

Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.

 https://vulnerability.circl.lu/vuln/usn-3791-1 USN-3791-1 — git vulnerability 2026-09-28T13:11:04.704823+00:00

Affected: Ubuntu:14.04:LTS: git, Ubuntu:16.04:LTS: git, Ubuntu:18.04:LTS: git

It was discovered that git did not properly validate git submodule urls or paths. A remote attacker could possibly use this to craft a git repository that causes arbitrary code execution when recursive operations are used.