Go-git: Malformed Git object data may cause panics or resource exhaustion in github.com/go-git/go-git

概要

参考情報

• go-git/go-git security advisory · ADVISORY

github.com/go-git/go-git/v5 のその他の脆弱性

• CVE-2026-71557中 6.3go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized …
• CVE-2026-71556高 7.1go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including che…
• GHSA-w5pp-99ch-qj29中 6.5go-git: Malformed Git object data may cause panics or resource exhaustion
• CVE-2026-45571中 5.4go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git …
• CVE-2026-45570緊急 9.6go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs …