Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field #8207

Merged
merged 1 commit into from
Jan 8, 2025
Merged

fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field #8207

merged 1 commit into from
Jan 8, 2025

Conversation

jdesouza
Copy link
Contributor

@jdesouza jdesouza commented Jan 7, 2025 •
edited by knqyf263
Loading

Description

go-git: argument injection via the URL field go-git: argument injection via the URL field
https://avd.aquasec.com/nvd/cve-2025-21613
https://avd.aquasec.com/nvd/cve-2025-21614

Issues

Close #8211

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've followed the conventions in the PR title.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

@jdesouza jdesouza requested a review from knqyf263 as a code owner January 7, 2025 14:33
@jdesouza jdesouza changed the title go-git: argument injection via the URL field CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field Jan 7, 2025
@jdesouza jdesouza changed the title CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field fix: CVE-2025-21613 and CVE-2025-21614 : go-git: argument injection via the URL field Jan 7, 2025
@knqyf263 knqyf263 added this pull request to the merge queue Jan 8, 2025
@knqyf263
Copy link
Collaborator

knqyf263 commented Jan 8, 2025

Thanks

Merged via the queue into aquasecurity:main with commit 670fbf2 Jan 8, 2025
13 of 22 checks passed
@aqua-bot aqua-bot mentioned this pull request Jan 8, 2025
Open
@knqyf263
Copy link
Collaborator

knqyf263 commented Jan 8, 2025

@aqua-bot backport release/v0.58

@aqua-bot aqua-bot mentioned this pull request Jan 8, 2025
Merged
@aqua-bot
Copy link
Contributor

aqua-bot commented Jan 8, 2025

Backport PR created: #8215

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@knqyf263 knqyf263 knqyf263 approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

github.com/go-git/go-git/v5: CVE-2025-21613
3 participants
@jdesouza @knqyf263 @aqua-bot