jelmer Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by jelmer

JSON RSS CSV 🔔 Create Alert Trigger

10 June 2026

Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload
CVE-2026-52726
JelmerDulwich7.5HIGH
Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows
CVE-2026-42305
JelmerDulwich8.8HIGH
Dulwich Vulnerable to Command Injection via Merge Driver Path
CVE-2026-42563
JelmerDulwich7.7HIGH