Поиск уязвимостей
Количество 16
Количество 16
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause go-git to read from or write to files outside the intended working directory when the repository is cloned and its worktree operations are used. Versions 5.19.2 and 6.0.0-alpha.5.
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause go-git to read from or write to files outside the intended working directory when the repository is cloned and its worktree operations are used. Versions 5.19.2 and 6.0.0-alpha.5.
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause go-git to read from or write to files outside the intended working directory when the repository is cloned and its worktree operations are used. Versions 5.19.2 and 6.0.0-alpha.5.
CVE-2026-71556
go-git: Worktree operations may follow symlinks
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. ...
ROS-20261105-80-0047
Множественные уязвимости alloy
ROS-20261022-80-0055
Уязвимость go-git
ROS-20261022-73-0056
Уязвимость go-git
GHSA-hc8v-wwc9-vgxm
go-git: Worktree operations may follow symlinks
SUSE-SU-2026:4082-1
Security update for amazon-ssm-agent
SUSE-SU-2026:3916-1
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls
openSUSE-SU-2026:21884-1
Security update for amazon-ssm-agent
SUSE-SU-2026:4286-1
Security update for amazon-ssm-agent
SUSE-SU-2026:4628-1
Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls
openSUSE-SU-2026:22032-1
Security update for alloy
SUSE-SU-2026:4408-1
Security update for alloy
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-71556 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause go-git to read from or write to files outside the intended working directory when the repository is cloned and its worktree operations are used. Versions 5.19.2 and 6.0.0-alpha.5. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-71556 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause go-git to read from or write to files outside the intended working directory when the repository is cloned and its worktree operations are used. Versions 5.19.2 and 6.0.0-alpha.5. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-71556 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and add) resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause go-git to read from or write to files outside the intended working directory when the repository is cloned and its worktree operations are used. Versions 5.19.2 and 6.0.0-alpha.5. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-71556 go-git: Worktree operations may follow symlinks | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
| CVE-2026-71556 go-git is an extensible git implementation library written in pure Go. ... | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | ROS-20261105-80-0047 Множественные уязвимости alloy | CVSS3: 7.1 | 0% Низкий | 4 дня назад |
| ROS-20261022-80-0055 Уязвимость go-git | CVSS3: 7.1 | 0% Низкий | 18 дней назад |
| ROS-20261022-73-0056 Уязвимость go-git | CVSS3: 7.1 | 0% Низкий | 18 дней назад |
| GHSA-hc8v-wwc9-vgxm go-git: Worktree operations may follow symlinks | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:4082-1 Security update for amazon-ssm-agent | 2 месяца назад | ||
| SUSE-SU-2026:3916-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls | 2 месяца назад | ||
| openSUSE-SU-2026:21884-1 Security update for amazon-ssm-agent | около 2 месяцев назад | ||
| SUSE-SU-2026:4286-1 Security update for amazon-ssm-agent | около 2 месяцев назад | ||
| SUSE-SU-2026:4628-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls | 27 дней назад | ||
| openSUSE-SU-2026:22032-1 Security update for alloy | около 1 месяца назад | ||
| SUSE-SU-2026:4408-1 Security update for alloy | около 1 месяца назад |
Уязвимостей на страницу