go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside the intended checkout target, including the repository's .git directory. These validations were introduced in upstream Git years ago, so the vulnerability arose from go-git drifting from those checks. This vulnerability is fixed in 5.19.1 and 6.0.0-alpha.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:LGo Git Project Go Git
APPGo-Git Project6.0.0< 5.19.1
Related vulnerabilities
Argument injection w bibliotece go-git β dowolne flagi git-upload-pack
Path Traversal w go-git umoΕΌliwiajΔ cy RCE (CVE-2023-49569)
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-g...
go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnera...
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability a...