From Dev.to
A Git Clone Can Run Attacker Code. A Safer Workflow for Repositories with Submodules
A repository can look like data until a command asks Git to fetch every submodule. On November 10, 2026, the Git project disclosed a high-severity flaw that could let an attacker-controlled repository...