VDB
GO-2026-4910
GO-2026-4910
PUBLISHED
Maliciously crafted idx file can cause asymmetric memory consumption in github.com/go-git/go-git
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | go-git/go-git/v5 | 5.0.0, 5.0.0 |
| github.com | go-git/go-git | 0, 0 |
| github.com | go-git/go-git/v4 | 0, 0 |
Timeline
- Apr 7, 2026 CVE Published
- Apr 8, 2026 CVE Updated