VDB
KO

GO-2026-5496

Improper single-quote escaping in go-git SSH transport in github.com/go-git/go-git

Details

Improper single-quote escaping in go-git SSH transport in github.com/go-git/go-git

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/go-git/go-git
Introduced in: 0

No fixed version published yet for github.com/go-git/go-git (go modules). Pin to a known-safe version or switch to an alternative.

Go / github.com/go-git/go-git/v5
Introduced in: 0 Fixed in: 5.19.1
Fix go get github.com/go-git/go-git/v5@v5.19.1
Go / github.com/go-git/go-git/v6
Introduced in: 0 Fixed in: 6.0.0-alpha.4
Fix go get github.com/go-git/go-git/v6@v6.0.0-alpha.4

References