Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 13:12:10 +0000 fkie_cve-2026-114094 https://db.gcve.eu/vuln/fkie_cve-2026-114094 <p>Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named &#39;C:&#39; that bypasses NTFS validation and writes files outside the worktree to achieve remote code execution.</p> <p>Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named &#39;C:&#39; that bypasses NTFS validation and writes files outside the worktree to achieve remote code execution.</p> https://db.gcve.eu/vuln/fkie_cve-2026-114094 GHSA-pxf3-54vf-v638 https://db.gcve.eu/vuln/ghsa-pxf3-54vf-v638 <p>Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named &#39;C:&#39; that bypasses NTFS validation and writes files outside the worktree to achieve remote code execution.</p> <p>Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named &#39;C:&#39; that bypasses NTFS validation and writes files outside the worktree to achieve remote code execution.</p> https://db.gcve.eu/vuln/ghsa-pxf3-54vf-v638 UBUNTU-CVE-2026-114094 https://db.gcve.eu/vuln/ubuntu-cve-2026-114094 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dulwich, Ubuntu:18.04:LTS: dulwich, Ubuntu:20.04:LTS: dulwich, Ubuntu:22.04:LTS: dulwich, Ubuntu:24.04:LTS: dulwich, Ubuntu:26.10: dulwich, Ubuntu:26.04:LTS: dulwich</p> <p>(Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Gi ...)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dulwich, Ubuntu:18.04:LTS: dulwich, Ubuntu:20.04:LTS: dulwich, Ubuntu:22.04:LTS: dulwich, Ubuntu:24.04:LTS: dulwich, Ubuntu:26.10: dulwich, Ubuntu:26.04:LTS: dulwich</p> <p>(Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Gi ...)</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-114094