All products

github.com/go-git/go-billy/v5

Go · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustionCVE-2026-44740 · GHSA-M3XC-H892-GGX6Version ranges need review. github.com/go-git/go-billy/v5github.com/go-git/go-billy/v6 GoRed Hat Medium Fix reported
go-billy has path traversal vulnerabilitiesCVE-2026-44973 · GHSA-QW64-3X98-G7Q2Version ranges need review. github.com/go-git/go-billy/v5github.com/go-git/go-billy/v6 GoRed Hat High Fix reported