—
GO-2025-3926
Harness Allows Arbitrary File Write in Gitness LFS server in github.com/harness/gitness
Quick fix
GO-2025-3926 — github.com/harness/gitness: upgrade to the fixed version with the command below.
go get github.com/harness/gitness@v1.0.4-gitspaces-beta.0.20250808064055-21c5ce42ae13Details
Harness Allows Arbitrary File Write in Gitness LFS server in github.com/harness/gitness
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/harness/gitness
Introduced in:
0Fixed in: 1.0.4-gitspaces-beta.0.20250808064055-21c5ce42ae13Fix
go get github.com/harness/gitness@v1.0.4-gitspaces-beta.0.20250808064055-21c5ce42ae13