CVE-2025-21614
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 6, 2025
CWE ID 400
CWE ID 770
Summary
CVE-2025-21614 is a denial-of-service (DoS) vulnerability affecting go-git, a widely used Go library for implementing Git functionality. Prior to version 5.13, go-git clients are susceptible to DoS attacks due to a flaw that allows an attacker to provide malicious responses from a Git server. These responses cause resource exhaustion within the go-git client, leading to a denial of service condition. To mitigate this issue, users running go-git versions 4 and above are advised to upgrade to version 5.13.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.