CVE-2026-95106

Gitea is vulnerable to a review and execution mismatch caused by pushing Git trees with duplicate tree entries . While Git's internal consistency checks typically reject such trees, Gitea allowed them. This creates a discrepancy where Gitea's web views resolve a path to the first entry, but git c...

Microsoft Visual Studio .git\config Command Execution

The version of Visual Studio installed on the remote host is affected by a command execution vulnerability when processing specially crafted git trees in a case-insensitive or case-normalizing file system. A remote attacker, using a specially crafted git tree, can overwrite a user's '.git/config'...

Git for Windows .git/config Command Execution

The version of Git for Windows also known as msysGit installed on the remote host is prior to 1.9.5. It is, therefore, affected by a command execution vulnerability when processing specially crafted git trees in a case-insensitive or case-normalizing file system. A remote attacker, using a...