CVE の正式な記録の公開前です
セキュリティの情報源の記事に出た番号をもとに載せています。番号や内容が変わることがあります。CVE.org・NVD に記録が公開されたら、内容をそれに置き換えます。
git-annex cross-repository data exfiltration
概要
Posted by Joey Hess on Oct 26I have released git-annex 10.20261026, which fixes a cross-repository data exfiltration attack. https://git-annex.branchable.com/download/ There are also backported patches for several past versions available as branches in the git repository: CVE-2026-112818-patch-10.20...
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Posted by Joey Hess on Oct 26I have released git-annex 10.20261026, which fixes a cross-repository data exfiltration attack. https://git-annex.branchable.com/download/ There are also backported patches for several past versions available as branches in the git repository: CVE-2026-112818-patch-10.20250416 CVE-2026-112818-patch-10.20251029 CVE-2026-112818-patch-10.20261006...
(oss-security (Openwall): CVE-2026-112818: git-annex cross-repository data exfiltration)
出典: oss-security (Openwall) NVD