github.com/go-git/go-git
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| go-git missing validation decoding Index v4 files leads to panic | github.com/go-git/go-git/v4github.com/go-git/go-git/v5 | GoRed Hat | Low | Fix reported | |
| go-git: Improper single-quote escaping in go-git SSH transport | github.com/go-git/go-git/v5github.com/go-git/go-git/v6 | Go | Low | Fix reported | |
| go-git improperly verifies data integrity values for .idx and .pack files | github.com/go-git/go-git/v4github.com/go-git/go-git/v5 | GoRed Hat | Medium | Fix reported | |
| go-git: Crafted repositories may modify main and submodule .git directories | github.com/go-git/go-git/v5github.com/go-git/go-git/v6 | Go | Medium | Fix reported | |
| go-git: Maliciously crafted idx file can cause asymmetric memory consumption | github.com/go-git/go-git/v4github.com/go-git/go-git/v5 | GoRed Hat | Medium | Fix reported | |
| go-git clients vulnerable to DoS via maliciously crafted Git server replies | github.com/go-git/go-git/v4github.com/go-git/go-git/v5 | GoRed Hat | High | Fix reported |