#git command https remote is affected by the #brotli buffer overflow vulnerability CVE-2026-111497 since it enables compression support: https://github.com/git/git/blob/7e34d8174dcda3435d1404c9a30bef46afe6c13e/http.c#L2284 https://github.com/git/git/blob/7e34d8174dcda3435d1404c9a30bef46afe6c13e/remote-curl.c#L980 Make sure to update brotli as soon as possible. https://github.com/advisories/GHSA-9v8h-qqgm-4m35 #infosec #cybersecurity #CVE_2026_111497