Skip to main content

GHSA-W5PP-99CH-QJ29

CVE Details​

Visit the official vulnerability details page for GHSA-W5PP-99CH-QJ29 to learn more.

Initial Publication​

05/29/2026

Last Update​

05/29/2026

Third Party Dependency​

github.com/go-git/go-git/v5

NIST CVE Summary​

go-git: Malformed Git object data may cause panics or resource exhaustion

CVE Severity​

6.5

Our Official Summary​

Investigation is ongoing to determine how this vulnerability affects our products.

Status​

fixed

Affected Products & Versions​

VersionPaletteAIPaletteAI VerteX
1.4.0⚠️ Impacted⚠️ Impacted
1.3.2⚠️ Impacted⚠️ Impacted
1.2.2⚠️ Impacted⚠️ Impacted

Revision History​

No revisions available.