github.com/go-git/go-git/v4
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| go-git missing validation decoding Index v4 files leads to panic | github.com/go-git/go-git/v4github.com/go-git/go-git/v5 | GoRed Hat | Low | Fix reported | |
| go-git improperly verifies data integrity values for .idx and .pack files | github.com/go-git/go-git/v4github.com/go-git/go-git/v5 | GoRed Hat | Medium | Fix reported | |
| go-git: Maliciously crafted idx file can cause asymmetric memory consumption | github.com/go-git/go-git/v4github.com/go-git/go-git/v5 | GoRed Hat | Medium | Fix reported | |
| go-git clients vulnerable to DoS via maliciously crafted Git server replies | github.com/go-git/go-git/v4github.com/go-git/go-git/v5 | GoRed Hat | High | Fix reported | |
| go-git has an Argument Injection via the URL field | github.com/go-git/go-git/v4github.com/go-git/go-git/v5 | GoRed Hat | Critical | Fix reported |