Vulnerabilidades em go-git
13 resultadosAnálise Vexday
Go-git acumula 13 vulnerabilidades na base, com 6 publicadas nos últimos 90 dias, indicando atividade de descoberta contínua; nenhuma está sendo explorada ativamente (KEV), mas 2 atingem nível crítico. A fraqueza dominante é traversal de diretório (CWE-22), um vetor clássico que merece atenção em ambientes que processam entrada de usuários ou operações de arquivo.
CVE-2023-49569CRITICALMaliciously crafted Git server replies can lead to path traversal and RCE on go-git clientsEPSS 1.5%CVE-2025-21613CRITICALgo-git has an Argument Injection via the URL fieldEPSS 1.3%CVE-2025-21614HIGHgo-git clients vulnerable to DoS via maliciously crafted Git server repliesEPSS 0.7%CVE-2023-49568HIGHMaliciously crafted Git server replies can cause DoS on go-git clientsEPSS 0.7%CVE-2026-45570LOWgo-git: Improper single-quote escaping in go-git SSH transportEPSS 0.4%CVE-2026-44973HIGHBilly: Path traversal vulnerabilitiesEPSS 0.3%CVE-2026-45571MEDIUMgo-git: Crafted repositories may modify main and submodule .git directoriesEPSS 0.3%CVE-2026-44740MEDIUMgo-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustionEPSS 0.3%CVE-2026-41506MEDIUMgo-git Credential leak via cross-host redirect in smart HTTP transportEPSS 0.3%CVE-2026-45022HIGHgo-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream GitEPSS 0.2%CVE-2026-33762LOWgo-git: Missing validation decoding Index v4 files leads to panicEPSS 0.2%CVE-2026-34165MEDIUMgo-git: Maliciously crafted idx file can cause asymmetric memory consumptionEPSS 0.1%CVE-2026-25934MEDIUMgo-git improperly verifies data integrity values for .idx and .pack filesEPSS 0.1%