CVE-2026-71557

creationtimestamp| type| source ---|---|--- 2026-08-08 03:02:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97106 2026-08-08 10:39:06+00:00| seen| https://gist.github.com/alon710/71d0ff9c71dc1f5ee8e40bba3da46014 2026-08-09 00:29:23+00:00| published-proof-of-concept|...

CVE-2026-71557 go-git: Malicious reference names may modify files outside the reference storage

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk paths under the reference storage directory, so a maliciously crafted reference name for example containing...