Filtered by vendor Meta Platforms, Inc
Subscriptions
Filtered by product Sapling Scm
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-104026 | 1 Meta Platforms, Inc | 1 Sapling Scm | 2026-10-04 | 7.8 High |
| In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate. | ||||
Page 1 of 1.