Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
go-git missing validation decoding Index v4 files leads to panic | Low Risk 2.8 | 7 months ago | 8 hours ago |
|
|
go-git: Worktree operations may follow symlinks | High Risk 7.1 | 2 months ago | 1 month ago |
|
|
go-git: Malformed Git object data may cause panics or resource exhaustion | Medium Risk 6.5 | 5 months ago | 1 month ago |
|
|
go-git: Improper single-quote escaping in go-git SSH transport | Low Risk 3.0 | 5 months ago | 1 month ago |
|
|
go-git's improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git | High Risk 8.0 | 5 months ago | 1 month ago |
|
|
go-git improperly verifies data integrity values for .idx and .pack files | Medium Risk 4.3 | 8 months ago | 1 month ago |
|
|
go-git: Malicious reference names may modify files outside the reference storage | Medium Risk 6.3 | 2 months ago | 1 month ago |
|
|
go-git: Crafted repositories may modify main and submodule .git directories | Medium Risk 5.4 | 5 months ago | 1 month ago |
|
|
go-git: Credential leak via cross-host redirect in smart HTTP transport | Medium Risk 4.7 | 6 months ago | 1 month ago |
|
|
go-git: Maliciously crafted idx file can cause asymmetric memory consumption | Medium Risk 5.0 | 7 months ago | 1 month ago |
|
|
go-git clients vulnerable to DoS via maliciously crafted Git server replies | High Risk 7.5 | 1 year ago | 1 month ago |
|
|
go-git has an Argument Injection via the URL field | Critical 9.8 | 1 year ago | 1 month ago |
|
|
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients | Critical 9.8 | 2 years ago | 1 month ago |
|
|
Maliciously crafted Git server replies can cause DoS on go-git clients | High Risk 7.5 | 2 years ago | 1 month ago |
|
|
Worktree operations may follow symlinks in github.com/go-git/go-git | Unknown | 2 months ago | 2 months ago |
|
|
Path traversal via crafted reference names in github.com/go-git/go-git | Unknown | 2 months ago | 2 months ago |
|
|
Go-git: Improper parsing of specially crafted objects may lead to inconsistent interpretation in github.com/go-git/go-git | Unknown | 3 months ago | 2 months ago |
|
|
Go-git: Malformed Git object data may cause panics or resource exhaustion in github.com/go-git/go-git | Unknown | 3 months ago | 2 months ago |
|
|
Go-git: Credential leak via cross-host redirect in smart HTTP transport in github.com/go-git/go-git | Unknown | 3 months ago | 2 months ago |
|
|
Go-git: Crafted repositories may modify main and submodule .git directories in github.com/go-git/go-git | Unknown | 3 months ago | 2 months ago |
|
|
Improper single-quote escaping in go-git SSH transport in github.com/go-git/go-git | Unknown | 3 months ago | 3 months ago |
|
|
Argument Injection via the URL field in github.com/go-git/go-git | Unknown | 1 year ago | 3 months ago |
|
|
Missing validation decoding Index v4 files leads to panic in github.com/go-git/go-git | Unknown | 6 months ago | 6 months ago |
|
|
Maliciously crafted idx file can cause asymmetric memory consumption in github.com/go-git/go-git | Unknown | 6 months ago | 6 months ago |
|
|
Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git | Unknown | 8 months ago | 8 months ago |
|
|
Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4 | Unknown | 2 years ago | 9 months ago |
|
|
Path traversal and RCE in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4 | Unknown | 2 years ago | 9 months ago |
|
|
Clients vulnerable to DoS via maliciously crafted Git server replies in github.com/go-git/go-git | Unknown | 1 year ago | 9 months ago |
Page 1