ROOT-APP-GOBINARY-CVE-2026-71556 CVE-2026-71556 in github.com/go-git/go-git/v5 - Patched by Root

Root has patched CVE-2026-71556 in the github.com/go-git/go-git/v5 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-45570 CVE-2026-45570 in github.com/go-git/go-git/v5 - Patched by Root

Root has patched CVE-2026-45570 in the github.com/go-git/go-git/v5 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-45022 CVE-2026-45022 in github.com/go-git/go-git/v5 - Patched by Root

Root has patched CVE-2026-45022 in the github.com/go-git/go-git/v5 package for Root:Go. Multiple fixed versions available...

gogs

gogs Here we will be setting up our lab in our SEED Ubuntu 16.04 VM and we need to install the Go Git Service GOGS on our VM first before we can move on to exploiting the SQL injection vulnerability. To setup the VM, here are the steps: Step 1: Install the Database Once we have logged in to the...

CVE-2026-44881_exploit

CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File Read Single-script exploit for CVE-2026-44881 , a Git symlink injection in Portainer's stack-deployment flow that lets any low-privilege authenticated user with stack-creation rights read arbitrary files reachable by the Portainer...

CLEANSTART-2026-MF55431 go-git is an extensible git implementation library written in pure Go

CVE-2026-71557 affects multiple packages. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...

CLEANSTART-2026-JT96055 go-git is an extensible git implementation library written in pure Go

CVE-2026-71556 affects multiple packages. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3933)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3933 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...

CVE-2026-71557-poc

CVE-2026-71557: go-git 참조 이름 경로 탐색 PoC English version 개요 이 리포지토리는 go-git 공개 보안 권고 GHSA-qgq7-7hm3-q39j 에 기반한 CVE-2026-71557 의 안전한 로컬 PoC입니다. 수정 전의 storage/filesystem은 loose reference 이름을 충분히 검증하지 않고 .git/ 경로로 사용했습니다. 그 때문에 refs/heads/../../config 같은 참조 이름을 전달하면 ..이 정규화되어 본래 reference storage 외부에 ...

Security update for amazon-ssm-agent (important)

openSUSE security update: security update for amazon-ssm-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21884-1 Rating: important References: bsc1276981 bsc1276994 bsc1278681 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-71556...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...

CVE-2026-71557

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

SUSE SLES15 Security Update : amazon-ssm-agent (SUSE-SU-2026:4082-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4082-1 advisory. - CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution bsc1276981. - CVE-2026-71557:...

github.com/go-git/go-git: github.com/go-git/go-git/v5: go-git: Unauthorized file modification via directory traversal in reference names

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

github.com/go-git/go-git: github.com/go-git/go-git/v5: go-git: Unauthorized file modification via directory traversal in reference names

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

CLEANSTART-2026-NK57336 go-git is an extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the grafana-alloy package. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...

github.com/go-git/go-git: github.com/go-git/go-git/v5: go-git: Unauthorized file modification via directory traversal in reference names

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

CVE-2026-92615 Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed

A flaw was found in flightctl. The configureRepoHTTPSClient function in the device-render worker builds a per-repository tls.Config which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates and installs it into go-git's process-global client.Protocols m...