Affected by GO-2026-4473
and 2 other vulnerabilities
GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git
GO-2026-4909: Missing validation decoding Index v4 files leads to panic in github.com/go-git/go-git
GO-2026-4910: Maliciously crafted idx file can cause asymmetric memory consumption in github.com/go-git/go-git

The highest tagged major version is
v6.
command
Version:
v4.0.0-rc15+incompatible
Opens a new window with list of versions in this module.
Published: Sep 4, 2017
License: MIT
Opens a new window with license information.
Imports: 4
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Click to show internal directories.
Click to hide internal directories.