GO-2024-2456
Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4
At a glance
- Published
- Updated
- CVE
- CVE-2023-49569
- Aliases
- GHSA-449p-3h89-pw88
Description
Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4
Affected packages
| Package | Versions |
|---|---|
| Go · gopkg.in/src-d/go-git.v4 | introduced 4.7.1 |
| Go · github.com/go-git/go-git/v5 | introduced 5.0.0, fixed 5.11.0 |
References
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |