{"affected":[{"defaultStatus":"unknown","product":"Git","source":"CNA: GitLab","vendor":"Git","versions":[{"status":"affected","version":"2.50.1"},{"status":"affected","version":"2.51.2"},{"status":"affected","version":"2.52.0"},{"status":"affected","version":"2.53.0"},{"status":"affected","version":"2.54.0"},{"status":"affected","version":"2.55.0"},{"status":"affected","version":"2.56.0"}]}],"cveId":"CVE-2026-113408","cwes":["CWE-22"],"description":"Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository","epss":null,"exploits":[],"kev":null,"metrics":[{"score":3.3,"severity":"low","source":"CNA: GitLab","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","version":"3.1"}],"modifiedAt":1794467359100,"publishedAt":1794467359100,"references":[{"source":"CNA: GitLab","tags":[],"url":"https://gitlab.com/gitlab-org/git/-/work_items/809"}],"remediation":[{"kind":"fix","source":"CNA: GitLab","text":"Upgrade to versions 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1, 2.55.1, 2.56.1 or above."}],"revision":"21b28da4a8fc3b6c81fcceda9c96330cff53f39d295091a25712177630e57b2a","sources":[{"modifiedAt":1794467359100,"name":"CNA: GitLab","retrievedAt":1794470902227,"url":"https://www.cve.org/CVERecord?id=CVE-2026-113408"}],"ssvc":null,"status":"published","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Git","updatedAt":1794470902227}