tocsin

CVE-2026-45570

6 advisories.

Go/github.com/go-git/go-git/v5 CVE-2026-45570: low

go-git: Improper single-quote escaping in go-git SSH transport

Action: Upgrade github.com/go-git/go-git/v5 to 5.19.1 or later.

go get github.com/go-git/go-git/v5@v5.19.1

Affected

introducedfixedlast affected
05.19.1-

Fixed versions

5.19.1

Sources

CVE-2026-45570 · published · modified · JSON

Go/github.com/go-git/go-git/v6 CVE-2026-45570: low

go-git: Improper single-quote escaping in go-git SSH transport

Action: Upgrade github.com/go-git/go-git/v6 to 6.0.0-alpha.4 or later.

go get github.com/go-git/go-git/v6@v6.0.0-alpha.4

Affected

introducedfixedlast affected
06.0.0-alpha.4-

Fixed versions

6.0.0-alpha.4

Sources

CVE-2026-45570 · published · modified · JSON

Go/github.com/go-git/go-git CVE-2026-45570: low

go-git: Improper single-quote escaping in go-git SSH transport

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-4.7.0

Fixed versions

No fixed version in the source.

Sources

CVE-2026-45570 · published · modified · JSON

Go/github.com/go-git/go-git CVE-2026-45570: unknown

Improper single-quote escaping in go-git SSH transport in github.com/go-git/go-git

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-45570 · published · modified · JSON

Go/github.com/go-git/go-git/v5 CVE-2026-45570: unknown

Improper single-quote escaping in go-git SSH transport in github.com/go-git/go-git

Action: Upgrade github.com/go-git/go-git/v5 to 5.19.1 or later.

go get github.com/go-git/go-git/v5@v5.19.1

Affected

introducedfixedlast affected
05.19.1-

Fixed versions

5.19.1

Sources

CVE-2026-45570 · published · modified · JSON

Go/github.com/go-git/go-git/v6 CVE-2026-45570: unknown

Improper single-quote escaping in go-git SSH transport in github.com/go-git/go-git

Action: Upgrade github.com/go-git/go-git/v6 to 6.0.0-alpha.4 or later.

go get github.com/go-git/go-git/v6@v6.0.0-alpha.4

Affected

introducedfixedlast affected
06.0.0-alpha.4-

Fixed versions

6.0.0-alpha.4

Sources

CVE-2026-45570 · published · modified · JSON