Veille CVE

Semaine du 5 octobre au 11 octobre 2026

1 CVE

  1. CVE-2026-106059 8.8 Élevée

    gitahead

    GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do shell script payload, which runs as the victim user when Show in Finder is chosen.