Fix: Reject path traversal in go-git reference names (GHSA-qgq7-7hm3-q39j)

github.com 2026-08-08查看中文 →

Security AdvisoryGHSA-qgq7-7hm3-q39jHighgo-git

Affected:

go-git

Referenced CVEs: CVE-2026-71557 · 6.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Path Traversal Arbitrary File Write in astralisone/rive-mcp-server-core 2026-08-08 @mindpilot/mcp 0.5.0 Path Traversal Vulnerability and POC 2026-08-08 Path Traversal in memory-graph allowing arbitrary file read/write with PoC 2026-08-08 Command Injection in MauricioMilano/coder-api Project Creation via Git Clone Parameters 2026-08-08 Command Injection (RCE) Vulnerability in llm_memory_mcp auto_capture MCP Action 2026-08-08

Offline Archive

Offline screenshot & PDF are Pro-exclusive