high8.5
CVE-2026-70551
A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL.
Impact
A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.