EUVD-2025-0045

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Argument injection vulnerability in go-git before version 5.13 allowing arbitrary git-upload-pack flag values.

Reporter	Title	Published	Views	Family All 240
IBM Security Bulletins	Security Bulletin: Due to use of go-git, IBM Instana Observability is vulnerable to a denial of service and argument injection vulnerability.	4 Mar 202505:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.3	7 Oct 202516:08	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for August 2025.	15 Sep 202507:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	11 Jun 202501:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to an argument injection vulnerability in go-git [CVE-2025-21613]	1 May 202520:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to PAM, go-git and Golang.org/X/Crypto	27 Feb 202503:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an argument injection vulnerability in go-git [CVE-2025-21613]	27 Feb 202517:16	–	ibm
Tenable Nessus	Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2025-824)	5 Feb 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : amazon-ssm-agent (ALAS-2025-2739)	4 Feb 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0013: grafana (ALINUX3-SA-2025:0013)	14 May 202500:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "419fa5c5-2f13-387e-8700-7fd6a39173c4",
        "vendor": {
          "name": "go-git"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4b0d9510-6221-3f52-827d-439b33286bfd",
        "product": {
          "name": "go-git"
        },
        "product_version": "4.0.0,  < 5.13.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/go-git/go-git/security/advisories/GHSA-v725-9546-7q7m
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-21613
github	www.github.com/go-git/go-git

03 Oct 2025 20:07Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

CVSS 49.2

EPSS0.03834

SSVC