# Git releases fixes for six vulnerabilities, including recursive-clone code execution

_Published Tuesday, November 10, 2026 at 1:16 PM EST · Security · Latest · Tier 1 — Major_

![Git releases fixes for six vulnerabilities, including recursive-clone code execution — Primary](https://github.blog/wp-content/uploads/2026/01/generic-security-github-logo-blue.png?fit=1920%2C1080)

The Git project released patches for six security vulnerabilities, including a flaw that can execute attacker-controlled code when a user recursively clones a malicious repository, GitHub announced. Fixes are available in Git 2.56.1 and six maintenance releases.

The recursive-clone flaw lets an extremely long path pass validation before being shortened during writing, allowing an attacker to replace submodule metadata with a link to malicious configuration or hooks. Other fixes address unintended file access, path traversal and memory corruption during merges or binary patch processing.

GitHub says it has deployed fixes across its cloud services. GitHub Enterprise Server updates are available in versions 3.19.15, 3.20.11, 3.21.9 and 3.22.4; patched Git releases for some bundled applications are still being coordinated.

## Sources

- [The GitHub Blog](https://github.blog/open-source/git/git-security-vulnerabilities-announced-7/)

---
Canonical: https://techandbusiness.org/newswire/Hxy7wrDu20BgzHGPoA6Gdy
Published: 2026-11-10T18:16:15.787Z
Story chronology: 2026-11-10T18:00:00.000Z
Retrieved: 2026-11-10T19:53:15.823Z
Publisher: Tech & Business (techandbusiness.org)