CVE-2026-114094 - Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths
CVE ID :CVE-2026-114094 Published : Oct. 21, 2026, 1:17 a.m. | 49 minutes ago Description :Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named...