https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:17:37.462844+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-ac12204 Withdrawn: CLEANSTART-2026-AC12204 — go-git is a highly extensible git implementation library written in pure Go 2026-10-10T18:17:37.670577+00:00

Withdrawn by the publisher.

Affected: CleanStart: argo-cd-fips

Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cve-2026-25934 CVE-2026-25934 — go-git improperly verifies data integrity values for .idx and .pack files 2026-10-10T18:17:37.670649+00:00

Affected: go-git

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would likely result in unexpected errors such as object not found. For context, clients fetch packfiles from upstream Git servers. Those files contain a checksum of their contents, so that clients can perform integrity checks before consuming it. The pack indexes (.idx) are generated locally by go-git, or the git cli, when new .pack files are received and processed. The integrity checks for both files were not being verified correctly. This vulnerability is fixed in 5.16.5.