Git 2.56.1 patches six vulnerabilities, including code execution during a recursive clone
On November 10, 2026 the Git project shipped six security fixes, including arbitrary code execution triggered by recursively cloning a hostile repository. Upgrade to Git 2.56.1 and update everything that bundles it — IDEs, CI runners, review bots — because the trigger is nothing more than a clone.