CVE-2026-45570

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single quotes embedded inside the path. A repository path containin...

UBUNTU-CVE-2026-45571

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside the intended checkout target, including the repository's .git directory. These validations were...

CVE-2026-45570

Technical details beyond the initial description are not present in the connected documents; monitor for updates.

EUVD-2026-32546

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single quotes embedded inside the path. A repository path containin...

CVE-2026-45571

Summary for CVE-2026-45571 (go-git) : The vulnerability affects the go-git library prior to version 5.19.1 and 6.0.0-alpha.4, where a path validation issue could allow crafted repository data to affect files outside the intended checkout target, including the repository’s .git directory. The root...

BIT-NODE-MIN-2023-23936 CRLF Injection in Nodejs ‘undici’ via host

Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library does not protect host HTTP header from CRLF injection vulnerabilities. This issue is patched in Undici v5.19.1. As a workaround, sanitize the headers.host string before passing to...

WordPress Citadela Listing Plugin <= 5.18.1 is vulnerable to Sensitive Data Exposure

Software Citadela Listing Type Plugin Vulnerable versions = 5.18.1 Fixed in 5.19.1 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-32086 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID a5c3aebb62b7 Credits Dave Jong Patchstack...

Node.js: Regular Expression Denial of Service in Headers fetch API

Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the Headers.set and Headers.append methods are vulnerable to Regular Expression Denial of Service ReDoS attacks when untrusted values are passed into the functions. This is due to the inefficient regular expression used to normali...

SUSE CVE-2023-23936

Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library does not protect host HTTP header from CRLF injection vulnerabilities. This issue is patched in Undici v5.19.1. As a workaround, sanitize the headers.host string before passing to...

DEBIAN-CVE-2023-24807

Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the Headers.set and Headers.append methods are vulnerable to Regular Expression Denial of Service ReDoS attacks when untrusted values are passed into the functions. This is due to the inefficient regular expression used to normali...

Crlf injection

Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library does not protect host HTTP header from CRLF injection vulnerabilities. This issue is patched in Undici v5.19.1. As a workaround, sanitize the headers.host string before passing to...

PT-2022-33516 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.1 Description: The issue concerns the alignment for DMA safety in the mpu6050 driver. It was introduced in version v5.10 and fixed in version v5.19.2. The actual impact and attack plausibility have no...

PT-2022-33578 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.18 through 5.19.1 Description: The issue is related to a refcount leak in the omap3xxx prm late init function. This problem was introduced in version v3.18 and is fixed in Linux Kernel version v5.19.2. The actual impac...

PT-2022-33560 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.17 through 5.19.1 Description: A refcount leak was discovered in the meson encoder cvbs init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 5.17...

PT-2022-33576 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.5 through 5.19.1 Description: A refcount leak was discovered in the of get ocmem function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version 5.5 and is fixed in...

CVE-2022-0130

CVE-2022-0130 affects Tenable.sc 5.14.0–5.19.1, enabling remote code execution when an attacker can stage a specific file type in the web server root prior to exploitation. Red Hat and third-party advisories corroborate the RCE vector and affected range. Impact is high (per CVSS 3.1: Network, Pri...

PT-2022-12982 · Tenable · Tenable.Sc

Name of the Vulnerable Software and Affected Versions: Tenable.sc versions 5.14.0 through 5.19.1 Description: A remote code execution issue was discovered, allowing a remote, unauthenticated attacker to execute code under special circumstances. The attacker must first stage a specific file type i...