89 matches found
checkout-index
checkout-index - Воспроизведение CVE-2025-22620 Это код доказательства концепции для RUSTSEC-2025-0001 CVE-2025-22620, GHSA-fqmf-w4xh-33rh. Это тот же код, что и в уведомлении, но в виде Rust-проекта, включающего Cargo.toml и Cargo.lock. Этот репозиторий был полезен при написании уведомления, и я...
write-ups
write-ups RCE in Github Desktop v2.9.4 RCE tramite gh run download GitHub CLI Claude Code: esecuzione di codice non sandboxed da prompt injection tramite confusione del worktree .git — CVE-2026-55607...
GO-2026-6213 Worktree operations may follow symlinks in github.com/go-git/go-git
Worktree operations may follow symlinks in github.com/go-git/go-git...
CVE-2026-71556
A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
UBUNTU-CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
GHSA-HC8V-WWC9-VGXM go-git: Worktree operations may follow symlinks
Impact A symlink traversal issue in go-git could allow worktree operations to modify files outside the intended worktree path. The worktreeFilesystem wrapper rejected dangerous path strings, including paths containing .git, parent-directory components, or control characters. However, it did not...
go-git: Worktree operations may follow symlinks
Impact A symlink traversal issue in go-git could allow worktree operations to modify files outside the intended worktree path. The worktreeFilesystem wrapper rejected dangerous path strings, including paths containing .git, parent-directory components, or control characters. However, it did not...
EUVD-2026-54526
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack in worktreefs.go and worktree.go are vulnerable to symlink traversal in filesystem-backed worktrees. An attacker can modify or overwrite files outside the intended worktree by placing a symlink in the tree and then...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack in worktreefs.go and worktree.go are vulnerable to symlink traversal in filesystem-backed worktrees. An attacker can modify or overwrite files outside the intended worktree by placing a symlink in the tree and then...
CVE-2026-71556 go-git: Worktree operations may follow symlinks
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
CVE-2026-71556 go-git: Worktree operations may follow symlinks
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
CVE-2026-71556 go-git: Worktree operations may follow symlinks
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
CVE-2026-71556
CVE-2026-71556 affects the Go library go-git (Go) and involves worktree operations (checkout, status, add) not confining symlink resolution to the worktree boundary. A malicious repository containing a symlink can cause access to files outside the intended working directory when cloning and using...
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack in worktreefs.go and worktree.go are vulnerable to symlink traversal in filesystem-backed worktrees. An attacker can modify or overwrite files outside the intended worktree by placing a symlink in the tree and then...
Linux Distros Unpatched Vulnerability : CVE-2026-71556
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and ad...
