https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:16:52.188830+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0459 certfr-2024-avi-0459 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T09:16:52.355078+00:00 certfr-2024-avi-0459 https://cve.radiocsirt.org/vuln/euvd-2026-244839 EUVD-2026-244839 2026-10-03T09:16:52.355165+00:00 EUVD-2026-244839 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49568 fkie_cve-2023-49568 2026-10-03T09:16:52.355181+00:00

A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.

Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability. This is a go-git implementation issue and does not affect the upstream git cli.

 https://cve.radiocsirt.org/vuln/ghsa-mw99-9chc-xw7r GHSA-mw99-9chc-xw7r — Maliciously crafted Git server replies can cause DoS on go-git clients 2026-10-03T09:16:52.355216+00:00

Affected: Go: github.com/go-git/go-git/v5, Go: gopkg.in/src-d/go-git.v4

### Impact A denial of service (DoS) vulnerability was discovered in go-git versions prior to `v5.11`. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in `go-git` clients.

Applications using only the in-memory filesystem supported by `go-git` are not affected by this vulnerability. This is a `go-git` implementation issue and does not affect the upstream `git` cli.

### Patches Users running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.11` in order to mitigate this vulnerability.

### Workarounds In cases where a bump to the latest version of `go-git` is not possible, we recommend limiting its use to only trust-worthy Git servers.

## Credit Thanks to Ionut Lalu for responsibly disclosing this vulnerability to us.

### References - [GHSA-mw99-9chc-xw7r](https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r)

 https://cve.radiocsirt.org/vuln/gsd-2023-49568 gsd-2023-49568 2026-10-03T09:16:52.355264+00:00 gsd-2023-49568 https://cve.radiocsirt.org/vuln/msrc_cve-2023-49568 msrc_CVE-2023-49568 — Maliciously crafted Git server replies can cause DoS on go-git clients 2026-10-03T09:16:52.355279+00:00 msrc_CVE-2023-49568 https://cve.radiocsirt.org/vuln/rhsa-2024:0298 RHSA-2024:0298 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.2 security and bug fix container updates 2026-10-03T09:16:52.355296+00:00

go-git: Maliciously crafted Git server replies can cause DoS on go-git clients go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49568 UBUNTU-CVE-2023-49568 2026-10-03T09:16:52.355316+00:00

Affected: Ubuntu:Pro:22.04:LTS: golang-github-go-git-go-git, Ubuntu:Pro:24.04:LTS: golang-github-go-git-go-git

A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability. This is a go-git implementation issue and does not affect the upstream git cli.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0158 WID-SEC-W-2024-0158 — Red Hat Advanced Cluster Management for Kubernetes: Mehrere Schwachstellen 2026-10-03T09:16:52.355340+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Red Hat Advanced Cluster Management for Kubernetes ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Code auszuführen.