Skip to content

GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git server

Moderate severity GitHub Reviewed Published Sep 7, 2026 in WangYihang/GitHacker • Updated Sep 9, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts