Skip to content
OpenAdvisories

Package · Ubuntu

golang-github-go-git-go-git-v6

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.1

    go-git: Worktree operations may follow symlinks

    go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution to the worktree bou…