Argument Injection via the URL field in github.com/go-git/go-git
{ "url": "https://pkg.go.dev/vuln/GO-2025-3368", "review_status": "REVIEWED" }