TI-2025-15573 CVE-2025-21613 · GHSA-v725-9546-7q7m
go-git has an Argument Injection via the URL field
Priority MEDIUM 44
go-git is a highly extensible git implementation library written in pure Go.
RHSA-2025:0907
ACS 4.6.2 enhancement and security update
Released 2025-02-03 · Red Hat rating Critical · View on Red Hat →
Fixed in
- RHACS 4.6 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
Fixes 3 records
TI-2025-15574 CVE-2025-21614 · GHSA-r9px-m959-cxf4
go-git clients vulnerable to DoS via maliciously crafted Git server replies
Priority MEDIUM 40
go-git is a highly extensible git implementation library written in pure Go.
TI-2024-30408 CVE-2024-45338 · GHSA-w32m-9786-jp63
Non-linear parsing of case-insensitive content in golang.org/x/net/html
Priority LOW 32
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing.