https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:18:15.832800+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-11252 bdu:2025-11252 2026-10-03T03:18:16.451208+00:00 bdu:2025-11252 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0459 certfr-2024-avi-0459 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T03:18:16.451292+00:00 certfr-2024-avi-0459 https://cve.radiocsirt.org/vuln/euvd-2026-201529 EUVD-2026-201529 2026-10-03T03:18:16.451313+00:00 EUVD-2026-201529 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49569 fkie_cve-2023-49569 2026-10-03T03:18:16.451326+00:00

A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved.

Applications are only affected if they are using the ChrootOS https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#ChrootOS , which is the default when using "Plain" versions of Open and Clone funcs (e.g. PlainClone). Applications using BoundOS https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#BoundOS  or in-memory filesystems are not affected by this issue. This is a go-git implementation issue and does not affect the upstream git cli.

 https://cve.radiocsirt.org/vuln/ghsa-449p-3h89-pw88 GHSA-449p-3h89-pw88 — Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients 2026-10-03T03:18:16.451364+00:00

Affected: Go: github.com/go-git/go-git/v5, Go: gopkg.in/src-d/go-git.v4

### Impact A path traversal vulnerability was discovered in go-git versions prior to `v5.11`. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved.

Applications are only affected if they are using the [ChrootOS](https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#ChrootOS), which is the default when using "Plain" versions of Open and Clone funcs (e.g. PlainClone). Applications using [BoundOS](https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#BoundOS) or in-memory filesystems are not affected by this issue. This is a `go-git` implementation issue and does not affect the upstream `git` cli.

### Patches Users running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.11` in order to mitigate this vulnerability.

### Workarounds In cases where a bump to the latest version of `go-git` is not possible in a timely manner, we recommend limiting its use to only trust-worthy Git servers.

## Credit Thanks to Ionut Lalu for responsibly disclosing this vulnerability to us.

 https://cve.radiocsirt.org/vuln/gsd-2023-49569 gsd-2023-49569 2026-10-03T03:18:16.451402+00:00 gsd-2023-49569 https://cve.radiocsirt.org/vuln/msrc_cve-2023-49569 msrc_CVE-2023-49569 — Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients 2026-10-03T03:18:16.451415+00:00 msrc_CVE-2023-49569 https://cve.radiocsirt.org/vuln/rhsa-2023:7197 RHSA-2023:7197 — Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security and extras update 2026-10-03T03:18:16.451431+00:00

golang.org/x/net/html: Cross site scripting opentelemetry: DoS vulnerability in otelhttp opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics ssh: Prefix truncation attack on Binary Packet Protocol (BPP) go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49569 UBUNTU-CVE-2023-49569 2026-10-03T03:18:16.451455+00:00

Affected: Ubuntu:Pro:22.04:LTS: golang-github-go-git-go-git, Ubuntu:Pro:24.04:LTS: golang-github-go-git-go-git

A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved. Applications are only affected if they are using the ChrootOS https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#ChrootOS , which is the default when using "Plain" versions of Open and Clone funcs (e.g. PlainClone). Applications using BoundOS https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#BoundOS  or in-memory filesystems are not affected by this issue. This is a go-git implementation issue and does not affect the upstream git cli.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0158 WID-SEC-W-2024-0158 — Red Hat Advanced Cluster Management for Kubernetes: Mehrere Schwachstellen 2026-10-03T03:18:16.451481+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Red Hat Advanced Cluster Management for Kubernetes ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Code auszuführen.