ROOT-APP-PYPI-CVE-2026-52726 CVE-2026-52726 in dulwich - Patched by Root

Root has patched CVE-2026-52726 in the dulwich package for Root:PyPI. Multiple fixed versions available...

CVE-2026-52726

creationtimestamp| type| source ---|---|--- 2026-06-11 00:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxw7rkajz2g 2026-06-11 01:51:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny4gmq7qk24 2026-07-02 18:35:05+00:00| published-proof-of-concept|...

CVE-2026-52726

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.23.2 and prior to version 1.2.5, dulwich.porcelain.submoduleupdate, and by extension porcelain.clone..., recursesubmodules=True, materializes attacker-controlled submodule paths from a crafted...