GO-2024-2456
Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2023-49569
- Alias
- GHSA-449p-3h89-pw88
Description
Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · gopkg.in/src-d/go-git.v4 | introduced 4.7.1 |
| Go · github.com/go-git/go-git/v5 | introduced 5.0.0, fixed 5.11.0 |
Références
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |