high7.8
CVE-2026-104026
In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs.
Impact
In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate.
Affected products
| Product | Affected versions |
|---|---|
| Sapling SCM | before 0.2.20260929-102736 |
Versions were read from the advisory text. No structured product data has been published for this record yet.