#git command https remote is affected by the #brotli buffer overflow vulnerability CVE-2026-111497 since it enables compression support:

https://github.com/git/git/blob/7e34d8174dcda3435d1404c9a30bef46afe6c13e/http.c#L2284
https://github.com/git/git/blob/7e34d8174dcda3435d1404c9a30bef46afe6c13e/remote-curl.c#L980

Make sure to update brotli as soon as possible.

https://github.com/advisories/GHSA-9v8h-qqgm-4m35

#infosec #cybersecurity #CVE_2026_111497