CVE-2026-5917

CVE-2026-5917 affects libgit2 v0.27.0–v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2). The gen_proto() function in ssh_libssh2.c inserts the repository path directly into a shell command passed to libssh2_channel_exec(), enabling a shell command injection vulnerability when a maliciou...