CyberICT

CVE-2026-71557

Microsoft · Published August 11, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

go-git: Malicious reference names may modify files outside the reference storage. go-git: Malicious reference names may modify files outside the reference storage

Affected Products

  • azl3 packer 1.9.5-18 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L