Search: CVE-2026-44740

The go-billy filesystem abstraction for Go prior to version 5.9.0 and including 6.0.0-alpha.1 contains vulnerabilities related to uncontrolled recursion and improper handling of malformed input. These issues can cause panics, infinite loops, or excessive resource consumption due to missing safety mechanisms like cycle detection and recursion limits. The vulnerability has been addressed in versions 5.9.0 and 6.0.0-alpha.1.