CVE-2026-41506 POC (Proof-of-Concept)

go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. This issue has been patched in versions 5.18.0 and 6.0.0-alpha.2.

Published: 2026-05-08

CVSS: 7.4

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Download CVE-2026-41506 POC (Proof-of-Concept) here:

Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.

https://hokyo.gr/poc-360-cve-2026-43568/

https://hokyo.gr/poc-463-cve-2026-43114/

https://hokyo.gr/poc-690-cve-2024-43384/

https://hokyo.gr/poc-176-cve-2026-7491/

https://hokyo.gr/poc-191-cve-2026-7674/