TI-2023-27070 CVE-2023-49569 · GHSA-449p-3h89-pw88
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
Priority MEDIUM 52
A path traversal vulnerability was discovered in go-git versions prior to v5.11.
go-git
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
go-git records in CISA KEVNo go-git vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Go-git · all components
TI-2025-15573 CVE-2025-21613 · GHSA-v725-9546-7q7m
go-git has an Argument Injection via the URL field
Priority MEDIUM 44
go-git is a highly extensible git implementation library written in pure Go.
TI-2025-15574 CVE-2025-21614 · GHSA-r9px-m959-cxf4
go-git clients vulnerable to DoS via maliciously crafted Git server replies
Priority MEDIUM 40
go-git is a highly extensible git implementation library written in pure Go.
TI-2023-27069 CVE-2023-49568 · GHSA-mw99-9chc-xw7r
Maliciously crafted Git server replies can cause DoS on go-git clients
Priority LOW 34
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.
TI-2026-30091 CVE-2026-41506 · GHSA-3xc5-wrhm-f963
go-git Credential leak via cross-host redirect in smart HTTP transport
Priority LOW 32
go-git is an extensible git implementation library written in pure Go.
TI-2026-32877 CVE-2026-45022 · GHSA-389r-gv7p-r3rp
go-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git
Priority LOW 30
go-git is an extensible git implementation library written in pure Go.
TI-2026-33320 CVE-2026-45571 · GHSA-crhj-59gh-8x96
go-git: Crafted repositories may modify main and submodule .git directories
Priority LOW 24
go-git is an extensible git implementation library written in pure Go.
TI-2026-26465 CVE-2026-34165 · GHSA-jhf3-xxhw-2wpp
go-git: Maliciously crafted idx file can cause asymmetric memory consumption
Priority LOW 22
go-git is an extensible git implementation library written in pure Go.
TI-2026-20964 CVE-2026-25934 · GHSA-37cx-329c-33x3
go-git improperly verifies data integrity values for .idx and .pack files
Priority LOW 19
go-git is a highly extensible git implementation library written in pure Go.
TI-2026-26141 CVE-2026-33762 · GHSA-gm2x-2g9h-ccm8
go-git: Missing validation decoding Index v4 files leads to panic
Priority LOW 13
go-git is an extensible git implementation library written in pure Go.
TI-2026-33319 CVE-2026-45570 · GHSA-m7cr-m3pv-hgrp
go-git: Improper single-quote escaping in go-git SSH transport
Priority LOW 12
go-git is an extensible git implementation library written in pure Go.