Skip to content
OpenAdvisories

Package · Wolfi

chezmoi

46 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.8
    CVE-2026-33762

    go-git: Missing validation decoding Index v4 files leads to panic

    go-git is an extensible git implementation library written in pure Go. Prior to version 5.17.1, go-git’s index decoder for format version 4 fails to validate the path name prefix length before applying it to the previously decoded path name. A maliciously cra…

    go-git go-git zot kubescape Debian Ubuntu Wolfi Go
  • Low 1.7
    CVE-2026-26958

    filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity

    filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the iden…

    FiloSottile filippo.io/edwards25519 kots aactl Debian Ubuntu Azure Linux Wolfi Go