<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: isomorphic-git</title><description>Every new CVE for isomorphic-git.</description><link>https://agentprime.io/</link><item><title>CVE-2026-63395: isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)</title><link>https://agentprime.io/advisories/CVE-2026-63395/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63395/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 19:48:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63475: isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)</title><link>https://agentprime.io/advisories/CVE-2026-63475/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63475/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 19:45:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63476: isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)</title><link>https://agentprime.io/advisories/CVE-2026-63476/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63476/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 19:44:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-63478: isomorphic-git: Path traversal via a &quot;..&quot; tree-entry name writes files outside the working directory on clone/checkout</title><link>https://agentprime.io/advisories/CVE-2026-63478/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63478/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 19:39:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-89011: isomorphic-git &lt; 1.42.0 Prototype Pollution via getRemoteInfo</title><link>https://agentprime.io/advisories/CVE-2026-89011/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-89011/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 19:56:25 GMT</pubDate><category>CVE</category></item></channel></rss>