CVE-2026-63395 - isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)
CVE ID :CVE-2026-63395 Published : Nov. 3, 2026, 8:18 p.m. | 46 minutes ago Description :isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components...