Vulnerability GO-2026-6213
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 months ago
August 18, 2026 at 04:38 PM UTC
Worktree operations may follow symlinks in github.com/go-git/go-git
v5.0.0 - v5.19.1
v5.0.0 - v5.19.1
Summary
Worktree operations may follow symlinks in github.com/go-git/go-git
Details
Worktree operations may follow symlinks in github.com/go-git/go-git
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
Path traversal via crafted reference names in github.com/go-git/go-git
v6.0.0-alpha.1 - v6.0.0-alpha.4 GO-2026-6214
v6.0.0-alpha.1 - v6.0.0-alpha.4 GO-2026-6214
Unknown
2 months ago
Path traversal via crafted reference names in github.com/go-git/go-git
v6.0.0-alpha.1 - v6.0.0-alpha.4 GO-2026-6214
v6.0.0-alpha.1 - v6.0.0-alpha.4 GO-2026-6214
Medium Risk
2 months ago
go-git: Malicious reference names may modify files outside the reference storage
v6.0.0-alpha.1 - v6.0.0-alpha.4 GHSA-qgq7-7hm3-q39j
v6.0.0-alpha.1 - v6.0.0-alpha.4 GHSA-qgq7-7hm3-q39j
Medium Risk
2 months ago
go-git: Malicious reference names may modify files outside the reference storage
v6.0.0-alpha.1 - v6.0.0-alpha.4 GHSA-qgq7-7hm3-q39j
v6.0.0-alpha.1 - v6.0.0-alpha.4 GHSA-qgq7-7hm3-q39j
High Risk
2 months ago
go-git: Worktree operations may follow symlinks
v5.0.0 - v5.19.1 GHSA-hc8v-wwc9-vgxm
v5.0.0 - v5.19.1 GHSA-hc8v-wwc9-vgxm
Impacted packages
Timeline
Published
2 months ago
August 18, 2026 at 04:38 PM UTC
Fixed (v5.19.2)
3 months ago
July 29, 2026 at 09:01 AM UTC
Fixed (v6.0.0-alpha.5)
3 months ago
July 29, 2026 at 09:01 AM UTC
Last Modified
2 months ago
September 01, 2026 at 03:55 AM UTC