Product by Go

    Github.com/go-git/go-git/v6

    6 known vulnerabilities in Github.com/go-git/go-git/v6 (Go), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Github.com/go-git/go-git/v6 (Go)
    CriticalCVE-2026-45570

    go-git: Improper single-quote escaping in go-git SSH transport

    also in 4 other products

    		9.6
    HighCVE-2026-71556

    go-git: Worktree operations may follow symlinks

    also in 3 other products

    		7.1
    MediumCVE-2026-71557

    go-git: Malicious reference names may modify files outside the reference storage

    also in 2 other products

    		6.3
    HighCVE-2026-45022

    Go-git: Incorrect Behavior Order: Validate Before Canonicalize

    also in 3 other products

    		7.5
    MediumCVE-2026-45571

    go-git: Crafted repositories may modify main and submodule .git directories

    also in 4 other products

    		5.4
    HighCVE-2026-41506

    go-git Credential leak via cross-host redirect in smart HTTP transport

    also in 3 other products

    		4.7

    All products by Go