All products

gopkg.in/src-d/go-git.v4

Go · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
go-git clients vulnerable to DoS via maliciously crafted Git server repliesCVE-2025-21614 · GHSA-R9PX-M959-CXF4Version ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat High Fix reported
go-git has an Argument Injection via the URL fieldCVE-2025-21613 · GHSA-V725-9546-7Q7MVersion ranges need review. github.com/go-git/go-git/v4github.com/go-git/go-git/v5 GoRed Hat Critical Fix reported
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clientsCVE-2023-49569 · GHSA-449P-3H89-PW88Version ranges need review. github.com/go-git/go-git/v5gopkg.in/src-d/go-git.v4 GoRed Hat Critical Fix reported
Maliciously crafted Git server replies can cause DoS on go-git clientsCVE-2023-49568 · GHSA-MW99-9CHC-XW7RVersion ranges need review. github.com/go-git/go-git/v5gopkg.in/src-d/go-git.v4 GoRed Hat High Fix reported