Threats Tagged 'cve-2026-53584'
View all threats tagged with 'cve-2026-53584'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-53584'
Click on any threat for detailed analysis and mitigation recommendations
0 A vulnerability in libgit2 prior to versions 1.8.6 and 1.9.5 causes incorrect validation of IP-literal HTTPS URLs when using OpenSSL. This flaw allows a network attacker with a CA-trusted certificate containing any IP SubjectAltName to intercept connections. The issue affects only OpenSSL builds and does not impact DNS SubjectAltName validation or other TLS backends. The vulnerability is fixed in libgit2 versions 1.8.6 and 1.9.5. Red Hat has released updated packages including libgit2-1.9.7-1.hum1 to address this issue. Join the discussion | GCVE Database | 08/25/2026, 09:07:50 UTC Added: 08/24/2026, 13:51:20 UTC |
A vulnerability in libgit2 prior to versions 1.8.6 and 1.9.5 allows crafted repositories to specify submodule paths with traversal components (e.g., ../escape-target), enabling applications initializing submodules to create directories outside the repository working tree. This issue has been fixed in libgit2 versions 1.8.6 and 1.9.5. The vulnerability has a medium severity with a CVSS score of 4.3 and affects multiple Ubuntu package versions. Official patches are available from Ubuntu. Join the discussion | GCVE Database | 07/31/2026, 00:00:00 UTC Added: 08/24/2026, 13:51:18 UTC |
Showing 1 to 2 of 2 results