Skip to main content
cve.nowby Sazabi
← Go
GoPackage

gopkg.in/src-d/go-git.v4

4 known vulnerabilities (2 critical, 2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 critical, 2 high
Registry
pkg.go.dev

Advisories 4

  • go-git clients vulnerable to DoS via maliciously crafted Git server replies

    Affected: from 4.0.0; from 4.0.0, through 4.13.1.

  • CVE-2025-21613Critical 9.2

    go-git has an Argument Injection via the URL field

    Affected: from 4.0.0; from 4.0.0, through 4.13.1.

  • CVE-2023-49569Critical 9.8

    Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

    Affected: from 4.0.0, through 4.13.1; from 4.7.1.

  • Maliciously crafted Git server replies can cause DoS on go-git clients

    Affected: from 4.7.1; from 4.7.1, through 4.13.1.