GitHub Enterprise Server (3.19-3.22) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/github-enterprise-server-3.19-3.22/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 04 Nov 2026 21:09:06 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgGit: Multiple vulnerabilities allowing remote code execution and denial of servicehttps://feed.craftedsignal.io/briefs/2026-11-github-enterprise-updates/Wed, 04 Nov 2026 21:09:06 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-github-enterprise-updates/Multiple vulnerabilities in Git, including an integer truncation flaw (CVE-2026-111760), enable attackers to achieve remote code execution or denial of service via malicious repositories during recursive clones or merge operations.The Git project has released updates addressing six security vulnerabilities affecting Git versions 2.50 through 2.55 and 2.56. The most critical issue, CVE-2026-111760, involves integer truncation during index handling, which can allow an attacker to write files outside of the intended directory structure and execute arbitrary code via malicious Git hooks. Other vulnerabilities include path traversal during clones, memory corruption during tag merges, and integer overflows leading to crashes.

Impact

Successful exploitation of these vulnerabilities can lead to remote code execution (RCE) on developer workstations or build servers that process malicious repositories, as well as denial of service (DoS) conditions for Git hosting infrastructure.

Recommendation

  • Update all Git installations to the patched versions: 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1, 2.55.1, or 2.56.1.
  • Upgrade GitHub Enterprise Server to version 3.19.15, 3.20.11, 3.21.9, or 3.22.4.
  • Implement temporary mitigations for CVE-2026-105437 by adding conflict-marker-size=7 to repository info/attributes files or disabling automated merge checks for untrusted repositories.
  • Enforce strict policies against recursive cloning and processing of untrusted repositories, patches, or fast-import streams.
]]>highadvisoryvulnerabilityenterprise-serversecurity-update