CVE-2026-72718

Named by 3 kept items in this workspace.

Search every workspace for CVE-2026-72718. It matches the name as written, so it can find other things that share it.

The items that name it 3

GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok - Manifold Security
writeup2026-09-01
GitSpawn vulnerability in Goose (git diff sink via core.fsmonitor config setting), scored 7.0 severity by the maintainers, assigned after report
Vulnerability Garden
tool2026-05-13
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
article
GitHub advisory for goose, CVSS 4.0 base score of 7.0, credited to Francisco Rosales; goose review command runs attacker code before goose contacts the model

All cves in this workspace.