github.com/go-git/go-billy/v6

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2026-44973

Billy: Path traversal vulnerabilities

Billy is an interface filesystem abstraction for Go. Prior to 5.9.0, multiple path traversal issues exist across different components of go-billy. Insufficient path sanitization and boundary enforcement may allow crafted paths (e.g., using ..) to escape inten…

go-git go-billy golang-github-go-git-go-billy-v6 golang-github-go-git-go-billy Debian Ubuntu Go

May 28, 2026