Affected by GO-2026-4473
and 2 other vulnerabilities
GO-2026-4473: Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git
GO-2026-4909: Missing validation decoding Index v4 files leads to panic in github.com/go-git/go-git
GO-2026-4910: Maliciously crafted idx file can cause asymmetric memory consumption in github.com/go-git/go-git

The highest tagged major version is
v6.
command
Version:
v4.3.0+incompatible
Opens a new window with list of versions in this module.
Published: Apr 11, 2018
License: Apache-2.0
Opens a new window with license information.
Imports: 8
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Click to show internal directories.
Click to hide internal directories.