VDB
GO-2026-4910
GO-2026-4910
PUBLISHED
Maliciously crafted idx file can cause asymmetric memory consumption in github.com/go-git/go-git
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | k9s-fips | 0, 0, 0 |
| chainguard | zot | 0, 0, 0 |
| wolfi | trivy | 0, 0, 0 |
| chainguard | gitlab-runner-18.6 | 0, 0, 0 |
| wolfi | flux-image-automation-controller | 0, 0, 0 |
| wolfi | gitaly-18.10 | 0, 0, 0 |
| wolfi | kaniko | 0, 0, 0 |
| chainguard | trivy | 0, 0, 0 |
| wolfi | gitlab-runner-18.7 | 0, 0, 0 |
| chainguard | flux-source-controller-fips | 0, 0, 0 |
| wolfi | flux-2.7 | 0, 0, 0 |
| chainguard | k9s | 0, 0, 0 |
| chainguard | gitaly-18.10 | 0, 0, 0 |
| chainguard | kots | 0, 0, 0 |
| chainguard | gitaly-fips-18.9 | 0, 0, 0 |
| chainguard | gitlab-runner-18.8 | 0, 0, 0 |
| wolfi | cerbos | 0, 0, 0 |
| wolfi | gitaly-18.9 | 0, 0, 0 |
| wolfi | grype | 0, 0, 0 |
| chainguard | argo-workflows-fips-3.6 | 0, 0, 0 |
…and 229 more
Timeline
- Apr 7, 2026 CVE Published
- Apr 8, 2026 CVE Updated