go-git go-billy

• CVE-2026-44740 Medium 6.5 go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion 0.4%
• CVE-2026-44973 High 8.1 Billy: Path traversal vulnerabilities 0.3%