PT-2026-29159 · Go-Git · Go-Git

Kq5Y · CVE-2026-34165 · Published 2026-03-30 · Updated 2026-06-08

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions go-git versions 5.0.0 through 5.17.0

Description A crafted .idx file can cause asymmetric memory consumption, potentially exhausting available memory and resulting in a denial-of-service (DoS) condition. Exploitation requires write access to the local repository's .git directory to create or alter existing .idx files.

Recommendations Upgrade to version 5.17.1 or later.

Exploit

Fix

Integer Underflow

Allocation of Resources Without Limits

Weakness Enumeration

CWE-191

CWE-770

Related Identifiers

CLEANSTART-2026-BU65096

CLEANSTART-2026-DQ17669

CLEANSTART-2026-ET12387

CLEANSTART-2026-FV86809

CLEANSTART-2026-GN78570

CLEANSTART-2026-HO16255

CLEANSTART-2026-JG72006

CLEANSTART-2026-LO26058

CLEANSTART-2026-LU21824

CLEANSTART-2026-ML41879

CLEANSTART-2026-NR54556

CLEANSTART-2026-NT80635

CLEANSTART-2026-PD78752

CLEANSTART-2026-TT42218

CLEANSTART-2026-VT65447

CLEANSTART-2026-WF25734

CLEANSTART-2026-YZ90223

CVE-2026-34165

GHSA-JHF3-XXHW-2WPP

GO-2026-4910

OPENSUSE-SU-2026:10509-1

OPENSUSE-SU-2026:10684-1

Affected Products

Go-Git

References · 270

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34165.json · Exploit
• https://github.com/go-git/go-git/security/advisories/GHSA-jhf3-xxhw-2wpp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46597 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-1229 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-ML41879 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-TT42218 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24051 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39835 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68121 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39882 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-11579 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32281 · Security Note
• https://osv.dev/vulnerability/GO-2026-4910 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46595 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42507 · Security Note