go-billy vulnerabilities

1 known vulnerability in go-billy from Go-git. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  go-billy: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-44973May 28, 2026Go-git

  Billy is an interface filesystem abstraction for Go. Prior to 5.9.0, multiple path traversal issues exist across different components of go-billy. Insufficient path sanitization and boundary enforcement may allow crafted paths (e.g., using ..) to escape intend