{"vulnerability": "cve-2026-45570", "sightings": [{"uuid": "d50da2df-d105-45a4-842f-27447f7e363e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45570", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mtmtndjnpz2d", "content": "A critical-severity fix just shipped for Go-Git Project Go-Git. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-45570", "creation_timestamp": "2026-08-21T22:46:03.639834Z"}, {"uuid": "daf629fe-5d76-48f5-a108-0e5aa57ed2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45570", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn5ulxzi2s", "content": "\ud83d\udea8  ALERT: CVE-2026-45570\n\nCVSS 9.6/10\n\n\ud83d\udccb WHAT IT IS:\ngo-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single quotes emb", "creation_timestamp": "2026-06-22T00:32:40.625539Z"}]}