Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/28 4:20 p.m.6 views

CVE-2026-45261 GitButler: Link injection via forge integration enables arbitrary script execution

GitButler is a modern Git-based version control interface for AI-powered workflows. Prior to 0.19.7, a emote code execution vulnerability exists in the Tauri-based GitButler desktop application. An attacker can inject a malicious link in a pull request body, which if clicked by the user allows fo...

9.3CVSS6.5AI score0.00515EPSS
SaveExploits0References3
Rows per page
Query Builder