Affected by GO-2025-3367
and 4 other vulnerabilities
GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git
GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git
GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git
GO-2026-4909: Missing validation decoding Index v4 files leads to panic in github.com/go-git/go-git
GO-2026-4910: Maliciously crafted idx file can cause asymmetric memory consumption in github.com/go-git/go-git

The highest tagged major version is
v6.
command
Version:
v5.4.1
Opens a new window with list of versions in this module.
Published: May 24, 2021
License: Apache-2.0
Opens a new window with license information.
Imports: 3
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Click to show internal directories.
Click to hide internal directories.