GitHub Desktop

Search everything

Mentions · 7d2
Mentions · 30d3
All mentions3
First seenOct 22, 2026
Last mentioned6h ago

Timeline

3 articles · newest first

Git fixes recursive-clone code execution flaw CVE-2026-111760

Fixes are Git 2.56.1 and backports for the 2.50–2.55 series; the same releases patch five other flaws.

The Hacker NewsNov 10, 19:23 UTC · 6h agoVulnerability 2 sourcesCVE-2026-111760 CVE-2026-113408 CVE-2026-114467+3

Git patches six flaws, including code execution on recursive clone

Fixes are in Git 2.56.1 and six maintenance releases; GitHub has patched its hosted services and listed GHES updates.

GitHub Blog · Securityupdated Nov 10, 19:23 UTC · 6h agofirst Nov 10, 18:00 UTC · 7h agoVulnerability 2 sourcesCVE-2026-111760 CVE-2026-113408 CVE-2026-114467+3

Exaforce says GitHub token theft and vishing drain data in minutes

A dormant OAuth token pulled 472 of 638 repositories; ClickFix and help-desk vishing followed the same pattern.

BleepingComputerOct 22, 14:02 UTC · 19d agoIndustry1 · 1 read

Related CVEs

by mentions

CVE-2026-1054377.5
Heap buffer overflow in Git three-way merge via conflict-marker-size
published 6h agoGit
CVE-2026-111760—
published —
CVE-2026-114466—
published —
CVE-2026-114469—
published —
CVE-2026-113408—
published —
CVE-2026-114467—
published —

Appears with

GitHub Enterprise Serverproduct · 2
GitHubvendor · 2
GitLaborganization · 1
GitHuborganization · 1
Git for Windowsproduct · 1
Shai-Huludmalware · 1
Gitvendor · 1
Oktavendor · 1
GitHub Enterprise Cloudproduct · 1
Scattered Spiderthreat actor · 1
Gitproduct · 1
Microsoftvendor · 1
Exaforceorganization · 1
Claude Codeproduct · 1
npmproduct · 1
Git projectorganization · 1

Entities are extracted by the model from each article. First seen Oct 22, 2026, last mentioned 6h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.