CVE-2026-114467

When Git strips GPG signatures from a commit message, removesignature stores the start and end positions of signatures in a fixed-size stack array of two entries. A message carrying more than two signatures makes it write past the end of that array and corrupt stack memory, a denial of service th...