Security Advisory

Go-git Security Update Advisory (CVE-2025-21613)

  • Jan 14 2025

Overview

We have released a security update to address a vulnerability in go-git. Users of affected products are advised to update to the latest version.

 

Affected Products

CVE-2025-21613

Go-git versions: 4.0.0 (inclusive) ~ 5.13.0 (excluded)

 

Resolved Vulnerabilities

 

Parameter injection vulnerability via URL field (CVE-2025-21613)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
 

CVE-2025-21613

Go-git version: 5.13.0

 

 

References

[1] Argument Injection via the URL field
https://github.com/go-git/go-git/security/advisories/GHSA-v725-9546-7q7m

Tags:

Previous Post

Next Post