Ggo-git

Products

Exploited and recent CVEs

• CVE-2026-71557 Medium 6.3 go-git: Malicious reference names may modify files outside the reference storage 0.4%
• CVE-2026-71556 High 7.1 go-git: Worktree operations may follow symlinks 0.4%
• CVE-2026-44740 Medium 6.5 go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion 0.4%
• CVE-2026-44973 High 8.1 Billy: Path traversal vulnerabilities 0.3%
• CVE-2026-45570 Low 2.3 go-git: Improper single-quote escaping in go-git SSH transport 0.4%
• CVE-2026-45571 Medium 5.4 go-git: Crafted repositories may modify main and submodule .git directories 0.3%
• CVE-2026-45022 High 7.0 go-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git 0.2%
• CVE-2026-41506 Medium 4.7 go-git Credential leak via cross-host redirect in smart HTTP transport 0.3%
• CVE-2026-33762 Low 2.8 go-git: Missing validation decoding Index v4 files leads to panic 0.2%
• CVE-2026-34165 Medium 5.0 go-git: Maliciously crafted idx file can cause asymmetric memory consumption 0.2%
• CVE-2026-25934 Medium 4.3 go-git improperly verifies data integrity values for .idx and .pack files 0.2%
• CVE-2025-21614 High 7.5 go-git clients vulnerable to DoS via maliciously crafted Git server replies 0.7%
• CVE-2025-21613 Critical 9.8 go-git has an Argument Injection via the URL field 1.3%
• CVE-2023-49569 Critical 9.8 Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients 1.5%
• CVE-2023-49568 High 7.5 Maliciously crafted Git server replies can cause DoS on go-git clients 0.7%