| |
Vulnerability CVE-2023-49568
Published: 2024-01-12
| Description: |
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.
Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.
This is a go-git implementation issue and does not affect the upstream git cli.
|
Type:
CWE-20 (Improper Input Validation)
References: |
https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
