VDB
GO-2025-3368
GO-2025-3368
PUBLISHED
Argument Injection via the URL field in github.com/go-git/go-git
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | k9s | 0, 0 |
| chainguard | kaniko-fips | 0, 0 |
| chainguard | amazon-ssm-agent | 0, 0 |
| chainguard | argocd-image-updater-fips | 0, 0 |
| wolfi | osv-scanner | 0, 0, 0 |
| wolfi | pulumi-language-yaml | 0, 0, 0 |
| chainguard | tfsec | 0, 0 |
| github.com | go-git/go-git/v4 | 4.0.0, 4.0.0, 4.0.0 |
| wolfi | argo-events | 0, 0, 0 |
| wolfi | pulumi | 0, 0, 0 |
| chainguard | dagger | 0, 0 |
| wolfi | grype | 0, 0, 0 |
| chainguard | goreleaser | 0 |
| wolfi | goreleaser | 0, 0, 0 |
| chainguard | src-fingerprint-fips | 0, 0 |
| wolfi | tfsec | 0, 0, 0 |
| chainguard | grafana-alloy | 0 |
| chainguard | scorecard | 0, 0 |
| chainguard | gptscript | 0 |
| wolfi | melange | 0, 0, 0 |
…and 101 more
Timeline
- Jan 7, 2025 CVE Published
- Jul 8, 2026 CVE Updated