CVE-2026-89011 | isomorphic-git up to 1.41.x getRemoteInfo prototype pollution

A vulnerability was found in isomorphic-git up to 1.41.x. It has been classified as critical. The impacted element is the function getRemoteInfo. This manipulation causes improperly controlled modification of object prototype attributes.

This vulnerability is handled as CVE-2026-89011. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More