CVE Intelligence

Meta Platforms, Inc Sapling SCM vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Meta Platforms, Inc Sapling SCM: 1 record(s), with affected versions and fixes.

CVE-2026-104026 High · 7.8 CWE-150 Oct 2, 2026
In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be…
In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate.