ThreatVectr
Tag

#git

4 stories taggedgit.

Photoreal editorial shot of a developer's dimly lit desk at night, glowing terminal window on a laptop screen showing abstract lines of code, a subtle stream of
AI Security

Grok's Coding Assistant Was Quietly Shipping Whole Git Repos to xAI

A researcher caught version 0.2.93 of Grok Build uploading entire repositories, private history included, to a Google Cloud bucket run by xAI.

3 min read
Full-frame photoreal editorial image of a developer workstation at night, two nearly identical strings of hexadecimal characters glowing softly on a dark monito
Cloud Security

GitHub's Green 'Verified' Badge Can Lie: Signed Commits Cloned Without the Key

Researchers show anyone can produce a second signed commit that matches the author, date and files of a real one, keeping GitHub's Verified stamp while changing the unique fingerprint developers rely on.

4 min read
Vulnerabilities

Critical Argument Injection Zero-Day in Gogs Puts Self-Hosted Git Servers at Risk

A CVSS 9.4 flaw lets authenticated attackers execute arbitrary code through maliciously named pull-request branches — no patch is available.

2 min read
Vulnerabilities

Authenticated RCE in Gogs Hits CVSS 9.4 — and There's No CVE Yet

A critical flaw in the self-hosted Git service lets any logged-in account execute arbitrary code on the server. The auth bar is low. The blast radius isn't.

2 min read
© 2026 Threat Vectr