Git fixes six vulnerabilities, including code execution during recursive clones

The Git project disclosed six vulnerabilities that could allow attackers to execute arbitrary code, corrupt memory, or write files to unintended locations when a user clones or interacts with a maliciously crafted repository. These flaws are particularly dangerous because developers routinely clone repositories from untrusted or semi-trusted sources, often as part of automated CI/CD pipelines, meaning exploitation can occur with minimal user interaction. The availability of patches in Git 2.56.1 and backported versions means organizations must act quickly to update all environments where Git is installed, including developer workstations, build servers, and cloud-hosted pipelines. Delayed patching leaves development infrastructure exposed to supply-chain-style attacks that could compromise source code, credentials, or entire build outputs.