Threats tagged 'brew-conda-lock-cve-2026-52726'

Dulwich versions from 0.23.2 up to but not including 1.2.5 contain a path traversal vulnerability in the submodule update functionality. This flaw allows an attacker controlling a repository's .gitmodules and gitlink entries to write files into arbitrary directories within the victim's .git directory, such as .git/hooks. Because executable bits are preserved, this can lead to arbitrary code execution when Git or Dulwich subsequently runs these hooks.