Skip to content
OpenAdvisories

Product · go-git

go-billy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-44973

    Billy: Path traversal vulnerabilities

    Billy is an interface filesystem abstraction for Go. Prior to 5.9.0, multiple path traversal issues exist across different components of go-billy. Insufficient path sanitization and boundary enforcement may allow crafted paths (e.g., using ..) to escape inten…

    go-git go-billy scorecard kyverno-cli-1.17 Debian Ubuntu Wolfi Go