[Git][security-tracker-team/security-tracker][master] Add CVE-2026-25934/golang-github-go-git-go-git

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1a6e315d by Salvatore Bonaccorso at 2026-02-10T09:39:19+01:00
Add CVE-2026-25934/golang-github-go-git-go-git

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -49,7 +49,8 @@ CVE-2026-25939 (FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard)
 CVE-2026-25938 (FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) softwa ...)
 	NOT-FOR-US: FUXA
 CVE-2026-25934 (go-git is a highly extensible git implementation library written in pu ...)
-	TODO: check
+	- golang-github-go-git-go-git <unfixed>
+	NOTE: https://github.com/go-git/go-git/security/advisories/GHSA-37cx-329c-33x3
 CVE-2026-25931 (vscode-spell-checker is a basic spell checker that works well with cod ...)
 	NOT-FOR-US: vscode-spell-checker
 CVE-2026-25925 (PowerDocu contains a Windows GUI executable to perform technical docum ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a6e315ddd22e0b5db9b4b19191323245496660f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1a6e315ddd22e0b5db9b4b19191323245496660f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260210/4db74525/attachment.htm>