CVE-2026-82252 gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules

gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repository tree, causing gitoxide to pars...

CVE-2017-14592

Sourcetree for macOS is affected by CVE-2017-14592: argument and command injection in Mercurial and Git repo handling, exploitable by a commit permission holder. From version 1.4.0 the issue can be triggered from a webpage via the Sourcetree URI handler. Affected releases are 1.0b2 through before...