Skip to content
OpenAdvisories

Vendor

go-git

15 known vulnerabilities.

Products

go-git 13 go-billy 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-71557 Public exploit

    go-git: Malicious reference names may modify files outside the reference storage

    go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk paths under the reference storage directory, so a maliciously crafted reference …

    go-git go-git github.com/go-git/go-git/v5 golang-github-go-git-go-git Debian Ubuntu Go