Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-6213
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 Worktree operations may follow symlinks in github.com/go-git/go-git 18 Aug
  • Fix available
GO-2026-6214
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 Path traversal via crafted reference names in github.com/go-git/go-git 18 Aug
  • Fix available
GHSA-qgq7-7hm3-q39j
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 go-git: Malicious reference names may modify files outside the reference storage 07 Aug
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-hc8v-wwc9-vgxm
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 go-git: Worktree operations may follow symlinks 07 Aug
  • Fix available
  • Severity - 7.1 (High)
GO-2026-5074
  • Go/github.com/go-git/go-git/v5
 Go-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation in github.com/go-git/go-git 24 Jul
  • Fix available
GO-2026-5105
  • Go/github.com/go-git/go-git/v5
 Go-git: Credential leak via cross-host redirect in smart HTTP transport in github.com/go-git/go-git 24 Jul
  • Fix available
GO-2026-5336
  • Go/github.com/go-git/go-git/v5
 Go-git: Crafted repositories may modify main and submodule .git directories in github.com/go-git/go-git 24 Jul
  • Fix available
GO-2026-5693
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 Go-git: Malformed Git object data may cause panics or resource exhaustion in github.com/go-git/go-git 24 Jul
  • Fix available
GO-2026-5496
  • Go/github.com/go-git/go-git
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 Improper single-quote escaping in go-git SSH transport in github.com/go-git/go-git 07 Jul
  • Fix available
GHSA-w5pp-99ch-qj29
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 go-git: Malformed Git object data may cause panics or resource exhaustion 29 May
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-crhj-59gh-8x96
  • Go/github.com/go-git/go-git
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 go-git: Crafted repositories may modify main and submodule .git directories 19 May
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-m7cr-m3pv-hgrp
  • Go/github.com/go-git/go-git
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 go-git: Improper single-quote escaping in go-git SSH transport 19 May
  • Fix available
  • Severity - 2.3 (Low)
GHSA-389r-gv7p-r3rp
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 go-git's improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git 11 May
  • Fix available
  • Severity - 7.0 (High)
GHSA-3xc5-wrhm-f963
  • Go/github.com/go-git/go-git/v5
  • Go/github.com/go-git/go-git/v6
 go-git: Credential leak via cross-host redirect in smart HTTP transport 17 Apr
  • Fix available
  • Severity - 4.7 (Medium)
GO-2026-4909
  • Go/github.com/go-git/go-git
  • Go/github.com/go-git/go-git/v4
  • Go/github.com/go-git/go-git/v5
 Missing validation decoding Index v4 files leads to panic in github.com/go-git/go-git 07 Apr
  • Fix available
GO-2026-4910
  • Go/github.com/go-git/go-git
  • Go/github.com/go-git/go-git/v4
  • Go/github.com/go-git/go-git/v5
 Maliciously crafted idx file can cause asymmetric memory consumption in github.com/go-git/go-git 07 Apr
  • Fix available
Load more...