GO-2026-5496

vendorUSosv

Improper single-quote escaping in go-git SSH transport in github.com/go-git/go-git

view advisory published 2026-07-07Licence: per source

Improper single-quote escaping in go-git SSH transport in github.com/go-git/go-git

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-45570UScritical9.6—
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan