https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:22:03 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0459 certfr-2024-avi-0459 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0459 https://cve.radiocsirt.org/vuln/euvd-2026-244839 EUVD-2026-244839 https://cve.radiocsirt.org/vuln/euvd-2026-244839 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49568 <p>A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.</p> <p>Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability. This is a go-git implementation issue and does not affect the upstream git cli.</p> <p>A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.</p> <p>Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability. This is a go-git implementation issue and does not affect the upstream git cli.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-49568 https://cve.radiocsirt.org/vuln/ghsa-mw99-9chc-xw7r <p><strong>Affected:</strong> Go: github.com/go-git/go-git/v5, Go: gopkg.in/src-d/go-git.v4</p> <p>### Impact A denial of service (DoS) vulnerability was discovered in go-git versions prior to `v5.11`. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in `go-git` clients.</p> <p>Applications using only the in-memory filesystem supported by `go-git` are not affected by this vulnerability. This is a `go-git` implementation issue and does not affect the upstream `git` cli.</p> <p>### Patches Users running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.11` in order to mitigate this vulnerability.</p> <p>### Workarounds In cases where a bump to the latest version of `go-git` is not possible, we recommend limiting its use to only trust-worthy Git servers.</p> <p>## Credit Thanks to Ionut Lalu for responsibly disclosing this vulnerability to us.</p> <p>### References - [GHSA-mw99-9chc-xw7r](https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r)</p> <p><strong>Affected:</strong> Go: github.com/go-git/go-git/v5, Go: gopkg.in/src-d/go-git.v4</p> <p>### Impact A denial of service (DoS) vulnerability was discovered in go-git versions prior to `v5.11`. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in `go-git` clients.</p> <p>Applications using only the in-memory filesystem supported by `go-git` are not affected by this vulnerability. This is a `go-git` implementation issue and does not affect the upstream `git` cli.</p> <p>### Patches Users running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.11` in order to mitigate this vulnerability.</p> <p>### Workarounds In cases where a bump to the latest version of `go-git` is not possible, we recommend limiting its use to only trust-worthy Git servers.</p> <p>## Credit Thanks to Ionut Lalu for responsibly disclosing this vulnerability to us.</p> <p>### References - [GHSA-mw99-9chc-xw7r](https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r)</p> https://cve.radiocsirt.org/vuln/ghsa-mw99-9chc-xw7r https://cve.radiocsirt.org/vuln/gsd-2023-49568 gsd-2023-49568 https://cve.radiocsirt.org/vuln/gsd-2023-49568 https://cve.radiocsirt.org/vuln/msrc_cve-2023-49568 msrc_CVE-2023-49568 https://cve.radiocsirt.org/vuln/msrc_cve-2023-49568 https://cve.radiocsirt.org/vuln/rhsa-2024:0298 <p>go-git: Maliciously crafted Git server replies can cause DoS on go-git clients go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients</p> <p>go-git: Maliciously crafted Git server replies can cause DoS on go-git clients go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients</p> https://cve.radiocsirt.org/vuln/rhsa-2024:0298 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49568 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: golang-github-go-git-go-git, Ubuntu:Pro:24.04:LTS: golang-github-go-git-go-git</p> <p>A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability. This is a go-git implementation issue and does not affect the upstream git cli.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: golang-github-go-git-go-git, Ubuntu:Pro:24.04:LTS: golang-github-go-git-go-git</p> <p>A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability. This is a go-git implementation issue and does not affect the upstream git cli.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49568 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0158 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Red Hat Advanced Cluster Management for Kubernetes ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Red Hat Advanced Cluster Management for Kubernetes ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0158