Security
فارسی
All products

github.com/go-git/go-git/v5

Go · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
go-git missing validation decoding Index v4 files leads to panicCVE-2026-33762 · GHSA-GM2X-2G9H-CCM8Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Low Fix reported
go-git: Worktree operations may follow symlinksCVE-2026-71556 · GHSA-HC8V-WWC9-VGXMVersion ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 GoRed Hat High Fix reported
go-git: Malformed Git object data may cause panics or resource exhaustionGHSA-W5PP-99CH-QJ29 · GO-2026-5693Version ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 Go Medium Fix reported
go-git: Improper single-quote escaping in go-git SSH transportCVE-2026-45570 · GHSA-M7CR-M3PV-HGRPVersion ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 Go Low Fix reported
go-git's improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream GitCVE-2026-45022 · GHSA-389R-GV7P-R3RPVersion ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 Go High Fix reported
go-git improperly verifies data integrity values for .idx and .pack filesCVE-2026-25934 · GHSA-37CX-329C-33X3Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Medium Fix reported
go-git: Malicious reference names may modify files outside the reference storageCVE-2026-71557 · GHSA-QGQ7-7HM3-Q39JVersion ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 GoRed Hat Medium Fix reported
go-git: Crafted repositories may modify main and submodule .git directoriesCVE-2026-45571 · GHSA-CRHJ-59GH-8X96Version ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 Go Medium Fix reported
go-git: Credential leak via cross-host redirect in smart HTTP transportCVE-2026-41506 · GHSA-3XC5-WRHM-F963Version ranges need review. github.com/go-git/go-git/v5github.com/go-git/go-git/v6 GoRed Hat Medium Fix reported
go-git: Maliciously crafted idx file can cause asymmetric memory consumptionCVE-2026-34165 · GHSA-JHF3-XXHW-2WPPVersion ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Medium Fix reported
go-git clients vulnerable to DoS via maliciously crafted Git server repliesCVE-2025-21614 · GHSA-R9PX-M959-CXF4Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat High Fix reported
go-git has an Argument Injection via the URL fieldCVE-2025-21613 · GHSA-V725-9546-7Q7MVersion ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Critical Fix reported
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clientsCVE-2023-49569 · GHSA-449P-3H89-PW88Version ranges need review. github.com/go-git/go-git/v5gopkg.in/src-d/go-git.v4 GoRed Hat Critical Fix reported
Maliciously crafted Git server replies can cause DoS on go-git clientsCVE-2023-49568 · GHSA-MW99-9CHC-XW7RVersion ranges need review. github.com/go-git/go-git/v5gopkg.in/src-d/go-git.v4 GoRed Hat High Fix reported