github.com/go-git/go-git/v6

Go · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
go-git: Worktree operations may follow symlinksCVE-2026-71556 · GHSA-HC8V-WWC9-VGXMVersion ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	GoRed Hat	High	Fix reported	2026-09-10
go-git: Malformed Git object data may cause panics or resource exhaustionGHSA-W5PP-99CH-QJ29 · GO-2026-5693Version ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	Go	Medium	Fix reported	2026-09-10
go-git: Improper single-quote escaping in go-git SSH transportCVE-2026-45570 · GHSA-M7CR-M3PV-HGRPVersion ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	Go	Low	Fix reported	2026-09-10
go-git's improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream GitCVE-2026-45022 · GHSA-389R-GV7P-R3RPVersion ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	Go	High	Fix reported	2026-09-10
go-git: Malicious reference names may modify files outside the reference storageCVE-2026-71557 · GHSA-QGQ7-7HM3-Q39JVersion ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	GoRed Hat	Medium	Fix reported	2026-09-10
go-git: Crafted repositories may modify main and submodule .git directoriesCVE-2026-45571 · GHSA-CRHJ-59GH-8X96Version ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	Go	Medium	Fix reported	2026-09-10
go-git: Credential leak via cross-host redirect in smart HTTP transportCVE-2026-41506 · GHSA-3XC5-WRHM-F963Version ranges need review.	github.com/go-git/go-git/v5 github.com/go-git/go-git/v6	GoRed Hat	Medium	Fix reported	2026-09-10