Sapling SCM vulnerabilities

1 known vulnerability in Sapling SCM from Meta Platforms. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Sapling SCM: Improper Neutralization of Escape, Meta, or Control Sequences

  CVE-2026-104026Oct 2, 2026Meta Platforms

  In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/anno