VDB

GO-2026-4909

GO-2026-4909 PUBLISHED

Missing validation decoding Index v4 files leads to panic in github.com/go-git/go-git

Affected Products

VendorProductVersions
github.comgo-git/go-git/v50, 0
github.comgo-git/go-git/v40, 0
github.comgo-git/go-git0, 0

Timeline

  • Apr 7, 2026 CVE Published
  • Apr 8, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›