A flaw was found in the go-getter library. A remote attacker could exploit this vulnerability by providing a maliciously crafted URL during certain git operations. This could allow the attacker to perform arbitrary file reads on the file system, potentially leading to the disclosure of sensitive information.
Exploit
CVE-2026-4660
CIRCL CVE
Refer to CVE-2026-4660 NVD advisory