CVE-2026-41506
published 2026-05-08CVE-2026-41506: go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication…
high7.4CVSS 3.1
AVNACLPRNUIRSCCHINAN
go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. This issue has been patched in versions 5.18.0 and 6.0.0-alpha.2.
Affected
200 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| advanced-cluster-security | rhacs-main-rhel8 | — | — |
| advanced-cluster-security | rhacs-rhel8-operator | — | — |
| advanced-cluster-security | rhacs-roxctl-rhel8 | — | — |
| advanced-cluster-security | rhacs-scanner-rhel8 | — | — |
| advanced-cluster-security | rhacs-scanner-slim-rhel8 | — | — |
| advanced-cluster-security | rhacs-scanner-v4-rhel8 | — | — |
| anchore | syft | — | — |
| ansible-automation-platform-24 | aap-must-gather-rhel8 | — | — |
| ansible-automation-platform-25 | aap-must-gather-rhel8 | — | — |
| ansible-automation-platform-26 | aap-must-gather-rhel9 | — | — |
| aquasecurity | trivy | — | — |
| assisted | agent-preinstall-image-builder-rhel9 | — | — |
| container-native-virtualization | bridge-marker-rhel9 | — | — |
| container-native-virtualization | cluster-network-addons-operator-rhel9 | — | — |
| container-native-virtualization | cnv-containernetworking-plugins-rhel9 | — | — |
| container-native-virtualization | cnv-must-gather-rhel8 | — | — |
| container-native-virtualization | cnv-must-gather-rhel9 | — | — |
| container-native-virtualization | hyperconverged-cluster-operator-rhel9 | — | — |
| container-native-virtualization | hyperconverged-cluster-webhook-rhel9 | — | — |
| container-native-virtualization | kubemacpool-rhel9 | — | — |
| container-native-virtualization | kubesecondarydns-rhel9 | — | — |
| container-native-virtualization | kubevirt-tekton-tasks-create-datavolume-rhel9 | — | — |
| container-native-virtualization | kubevirt-tekton-tasks-disk-virt-customize-rhel9 | — | — |
| container-native-virtualization | multus-dynamic-networks-rhel9 | — | — |
| container-native-virtualization | ovs-cni-plugin-rhel9 | — | — |