VDB
GO-2025-3368
GO-2025-3368
PUBLISHED
Argument Injection via the URL field in github.com/go-git/go-git
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | go-git/go-git/v4 | 4.0.0, 4.0.0 |
| github.com | go-git/go-git/v5 | 0, 0 |
| gopkg.in | src-d/go-git.v4 | 4.0.0, 4.0.0 |
Timeline
- Jan 7, 2025 CVE Published
- Apr 20, 2026 CVE Updated