CVE-2025-21614

HIGH7.5EPSS 0.23%

Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

發布日:2025/1/6修改日:2026/2/4

也稱為:GHSA-r9px-m959-cxf4 RHSA-2025:0401 RHSA-2025:0662CGA-rxrq-jmmh-wchrGO-2025-3367

描述

Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

受影響套件(7)

Debian/golang-github-go-git-go-gitfrom 0
Go/github.com/go-git/go-git>= 4.0.0, <= 4.13.1
Go/github.com/go-git/go-git/v4>= 4.0.0
Go/github.com/go-git/go-git/v5from 0, < 5.13.0
Go/github.com/go-git/go-git/v5from 0, < 5.13.0
Go/gopkg.in/src-d/go-git.v4>= 4.0.0
Go/gopkg.in/src-d/go-git.v4>= 4.0.0, <= 4.13.1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

參考連結(4)