Affected by GO-2026-4473
and 2 other vulnerabilities
GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git
GO-2026-4909: Missing validation decoding Index v4 files leads to panic in github.com/go-git/go-git
GO-2026-4910: Maliciously crafted idx file can cause asymmetric memory consumption in github.com/go-git/go-git

The highest tagged major version is
v6.
package
Version:
v5.16.4
Opens a new window with list of versions in this module.
Published: Nov 23, 2025
License: Apache-2.0
Opens a new window with license information.
Imports: 7
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
Source Files
¶
Click to show internal directories.
Click to hide internal directories.