Skip to content
OpenAdvisories

Package · Ubuntu

golang-github-go-git-go-git-v6

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2026-71557 Public exploit

    go-git: Malicious reference names may modify files outside the reference storage

    go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk paths under the reference storage directory, so a maliciously crafted reference …

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • High 7.1
    CVE-2026-71556

    go-git: Worktree operations may follow symlinks

    go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution to the worktree bou…

    go-git go-git zot kubescape Debian Ubuntu Azure Linux Wolfi Go