CVE-2026-44973

3 advisories.

Go/github.com/go-git/go-billy/v5 CVE-2026-44973: high 8.1, EPSS 0.47%

go-billy has path traversal vulnerabilities

Action: Upgrade github.com/go-git/go-billy/v5 to 5.9.0 or later.

go get github.com/go-git/go-billy/v5@v5.9.0

introduced	fixed	last affected
0	5.9.0	-

5.9.0

CVE-2026-44973 · published 2026-05-14T18:25:38Z · modified 2026-09-10T03:50:55.280354755Z · JSON

go-billy has path traversal vulnerabilities

Action: Upgrade github.com/go-git/go-billy/v6 to 6.0.0-alpha.1 or later.

go get github.com/go-git/go-billy/v6@v6.0.0-alpha.1

introduced	fixed	last affected
0	6.0.0-alpha.1	-

6.0.0-alpha.1

CVE-2026-44973 · published 2026-05-14T18:25:38Z · modified 2026-09-10T03:50:55.280354755Z · JSON

Go-billy has path traversal vulnerabilities in github.com/go-git/go-billy

Action: Upgrade github.com/go-git/go-billy/v5 to 5.9.0 or later.

go get github.com/go-git/go-billy/v5@v5.9.0

introduced	fixed	last affected
0	5.9.0	-

5.9.0

CVE-2026-44973 · published 2026-07-24T18:35:55Z · modified 2026-08-08T21:41:53.102364136Z · JSON