CVE-2026-41506

3 advisories.

Go/github.com/go-git/go-git/v5 CVE-2026-41506: medium 4.7

go-git: Credential leak via cross-host redirect in smart HTTP transport

Action: Upgrade github.com/go-git/go-git/v5 to 5.18.0 or later.

go get github.com/go-git/go-git/v5@v5.18.0

introduced	fixed	last affected
0	5.18.0	-

5.18.0

CVE-2026-41506 · published 2026-04-17T22:31:35Z · modified 2026-09-10T03:50:42.618780019Z · JSON

go-git: Credential leak via cross-host redirect in smart HTTP transport

Action: Upgrade github.com/go-git/go-git/v6 to 6.0.0-alpha.2 or later.

go get github.com/go-git/go-git/v6@v6.0.0-alpha.2

introduced	fixed	last affected
0	6.0.0-alpha.2	-

6.0.0-alpha.2

CVE-2026-41506 · published 2026-04-17T22:31:35Z · modified 2026-09-10T03:50:42.618780019Z · JSON

Go-git: Credential leak via cross-host redirect in smart HTTP transport in github.com/go-git/go-git

Action: Upgrade github.com/go-git/go-git/v5 to 5.18.0 or later.

go get github.com/go-git/go-git/v5@v5.18.0

introduced	fixed	last affected
0	5.18.0	-

5.18.0

CVE-2026-41506 · published 2026-07-24T18:35:55Z · modified 2026-08-08T21:41:52.957086347Z · JSON