AZL-55106
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-55106.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-55106
- Upstream
- Published
- 2025-01-06T17:15:47Z
- Modified
- 2026-04-01T05:18:30.381693Z
- Summary
- CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-14
- Details
-
go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability.
- References