The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the only protocol that shells out to git binaries. This vulnerability is fixed in 5.13.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-selinuxUpgrade grafana | Jan 21, 2025 | Jan 6, 2025 |
| Amazon Linux Ami 2 | — | Upgrade amazon-ssm-agent | Feb 5, 2025 | Jan 6, 2025 |
| Amazon_linux_2023 | — | Upgrade amazon-ssm-agent | Feb 17, 2025 | Jan 6, 2025 |
| Debian | — | Upgrade golang-github-go-git-go-git | May 15, 2025 | Jan 6, 2025 |
| Oracle_linux | — | Upgrade grafana-selinuxUpgrade grafana | Jan 20, 2025 | Jan 6, 2025 |
| Redhat_linux | — | Upgrade grafana-debugsourceUpgrade grafana-selinuxUpgrade grafana-debuginfoUpgrade grafana | Jan 22, 2025 | Jan 6, 2025 |
| Rocky_linux | — | Upgrade grafana-debugsourceUpgrade grafana-selinuxUpgrade grafana-debuginfoUpgrade grafana | Feb 14, 2025 | Jan 6, 2025 |
| Suse | — | Upgrade grafanaUpgrade rime-schema-quickUpgrade rime-schema-soutzoeUpgrade rime-schema-ipaUpgrade rime-schema-strokeUpgrade rime-schema-allUpgrade govulncheck-vulndbUpgrade rime-schema-wubiUpgrade rime-schema-wugniuUpgrade rime-schema-bopomofoUpgrade rime-schema-cantoneseUpgrade rime-schema-combo-pinyinUpgrade rime-schema-pinyin-simpUpgrade amazon-ssm-agentUpgrade rime-schema-essay-simpUpgrade rime-schema-middle-chineseUpgrade rime-schema-luna-pinyinUpgrade rime-schema-terra-pinyinUpgrade rime-schema-extraUpgrade rime-schema-customUpgrade rime-schema-stenotypeUpgrade rime-schema-cangjieUpgrade rime-schema-essayUpgrade rime-schema-scjUpgrade rime-schema-arrayUpgrade trivyUpgrade rime-schema-emojiUpgrade rime-schema-defaultUpgrade rime-schema-preludeUpgrade rime-schema-double-pinyin | Jan 13, 2025 | Jan 6, 2025 |
| Ubuntu | — | Upgrade golang-github-go-git-go-git-dev (Ubuntu Pro)Upgrade go-git (Ubuntu Pro) | Mar 13, 2026 | Jan 6, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub