commitgraph

Nov 23, 2025 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Sep 17, 2025 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Jun 6, 2025 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Jun 4, 2025 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Apr 14, 2025 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Apr 10, 2025 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Feb 27, 2025 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Jan 22, 2025 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Jan 2, 2025 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Dec 28, 2024 GO-2026-4473

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Mar 19, 2024 GO-2025-3367 +2 more

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Dec 8, 2023 GO-2025-3367 +2 more

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Nov 25, 2023 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Oct 13, 2023 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Sep 12, 2023 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Jul 24, 2023 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Jul 21, 2023 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

May 23, 2023 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Mar 7, 2023 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Feb 28, 2023 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Jan 5, 2023 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Dec 11, 2022 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Nov 30, 2022 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Jun 2, 2021 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

May 24, 2021 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

May 12, 2021 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Mar 29, 2021 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Oct 9, 2020 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

May 24, 2020 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Mar 15, 2020 GO-2024-2456 +4 more

  GO-2024-2456: Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2024-2466: Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4

  GO-2025-3367: Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git

  GO-2025-3368: Argument Injection via the URL field in github.com/go-git/go-git

  GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git

Changes in this version

+ var ErrMalformedCommitGraphFile = errors.New("Malformed commit graph file")

+ var ErrUnsupportedHash = errors.New("Unsupported hash algorithm")

+ var ErrUnsupportedVersion = errors.New("Unsupported version")

+ type CommitData struct

+ Generation int

+ ParentHashes []plumbing.Hash

+ ParentIndexes []int

+ TreeHash plumbing.Hash

+ When time.Time

+ type Encoder struct

+ func NewEncoder(w io.Writer) *Encoder

+ func (e *Encoder) Encode(idx Index) error

+ type Index interface

+ GetCommitDataByIndex func(i int) (*CommitData, error)

+ GetIndexByHash func(h plumbing.Hash) (int, error)

+ Hashes func() []plumbing.Hash

+ func OpenFileIndex(reader io.ReaderAt) (Index, error)

+ type MemoryIndex struct

+ func NewMemoryIndex() *MemoryIndex

+ func (mi *MemoryIndex) Add(hash plumbing.Hash, commitData *CommitData)

+ func (mi *MemoryIndex) GetCommitDataByIndex(i int) (*CommitData, error)

+ func (mi *MemoryIndex) GetIndexByHash(h plumbing.Hash) (int, error)

+ func (mi *MemoryIndex) Hashes() []plumbing.Hash