CVE-2026-45571: go-git: Crafted repositories may modify main and submodule .git directories

Overview

Severity
Medium (CVSS 5.4)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U
Exploit Status
Not Exploited
Patch Tuesday
2026-May
Released
2026-05-28

Affected Products (1)

Open Source Software

  • azl3 packer 1.9.5-13 on Azure Linux 3.0

Revision History

  • 2026-05-28: Information published.