Vulnerability Report: GO-2026-5074
- CVE-2026-45022, GHSA-389r-gv7p-r3rp
- Affects: github.com/go-git/go-git/v5
- Published: Jul 24, 2026
Go-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation in github.com/go-git/go-git
For detailed information about this vulnerability, visit https://github.com/go-git/go-git/security/advisories/GHSA-389r-gv7p-r3rp.
Affected Packages
-
PathGo VersionsSymbols
-
before v5.19.0
Aliases
References
- https://github.com/go-git/go-git/security/advisories/GHSA-389r-gv7p-r3rp
- https://github.com/go-git/go-git/releases/tag/v5.19.0
- https://vuln.go.dev/ID/GO-2026-5074.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.