CVE-2026-45571

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside the intended checkout target, including the repository's .git directory. These validations were...

CLSA-2025-1767003835 git-lfs: Fix of CVE-2025-26625

CVE-2025-26625: prevent git lfs checkout and git lfs pull write outside repo...