`github.com/go-git/go-billy/v5`

Ecosystem:
go

Package URL:
pkg:golang/github.com/go-git/go-billy/v5

Total PRs:
120 Dependabot PRs

Latest PR:
15 days ago

Unique Repositories:
88 repositories

Unique Repos (30 days):
6 repositories

Security Advisories

go-billy has path traversal vulnerabilities

GHSA-qw64-3x98-g7q2 CVE-2026-44973 HIGH published about 1 month ago • updated 5 days ago

### Impact Multiple path traversal issues exist across different components of `go-billy`. Insufficient path sanitization and boundary enforcement ...

go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

GHSA-m3xc-h892-ggx6 CVE-2026-44740 MODERATE published about 1 month ago • updated 5 days ago

### Impact Multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or ex...

Recent PRs

RSS Feed

chore(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 in the go_modules group across 1 directory

AKJUS/frizbee #28

5.8.0 → 5.9.0 Minor PR

Open 15 days ago 1 comment

build(deps): bump the go_modules group across 2 directories with 25 updates

EmilynnJ/kgateway #2

5.6.2 → 5.9.0 Minor PR

Open 15 days ago 4 comments

chore(deps): bump the gomod-minor-and-patch group across 1 directory with 17 updates

speakeasy-api/speakeasy #2055

5.6.2 → 5.9.0 Minor PR

Closed 19 days ago 1 comment

Bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.9.0

Dct555/tenderly-cll #2

5.3.1 → 5.9.0 Minor PR

Open 23 days ago 1 comment

deps: bump the go-dependencies group across 1 directory with 5 updates

timescale/tigerfs #36

5.8.0 → 5.9.0 Minor PR

Closed 26 days ago 1 comment

chore(deps): bump github.com/go-git/go-billy/v5 from 5.6.2 to 5.9.0

joint-online-judge/JOJ3 #4

5.6.2 → 5.9.0 Minor PR

Closed about 1 month ago 2 comments

Bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

berquerant/install-via-git-go #70

5.8.0 → 5.9.0 Minor PR

Closed about 1 month ago 1 comment

Bump github.com/go-git/go-billy/v5 from 5.1.0 to 5.9.0

lilsunny243/node-1 #37

5.1.0 → 5.9.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the go_modules group across 2 directories with 8 updates

GlacierEQ/cli #4

5.6.2 → 5.9.0 Minor PR

Open about 1 month ago 2 comments

Bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 in /internal/tools

cardinalhq/opentelemetry-collector #3

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 1 comment

build(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

nais/cli #730

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 2 comments

Bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

Dustin4444/bashbrew #12

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 3 comments

chore(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

ariel-frischer/autospec #30

5.8.0 → 5.9.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.9.0 in /tools

newrelic/newrelic-client-go #1410

5.6.0 → 5.9.0 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

GoogleCloudPlatform/k8s-config-connector #8121

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

aspect-build/aspect-cli-legacy #336

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 1 comment

Bump github.com/go-git/go-billy/v5 from 5.0.0 to 5.9.0

Dustin4444/community-1 #7

5.0.0 → 5.9.0 Minor PR

Open about 1 month ago 2 comments

Bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 in /tools

harekrishnarai/scorecard #37

5.8.0 → 5.9.0 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

aviator-co/av #744

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 2 comments

Bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

jh125486/gradebot #42

5.8.0 → 5.9.0 Minor PR

Closed about 1 month ago 1 comment

build(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 in /collector/internal/tools

sevincit/opentelemetry-lambda #94

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 48 comments

Bump github.com/go-git/go-billy/v5 from 5.3.1 to 5.9.0 in /internal/tools

Shopify/opentelemetry-collector-contrib #3310

5.3.1 → 5.9.0 Minor PR

Open about 1 month ago 1 comment

Bump github.com/go-git/go-billy/v5 from 5.1.0 to 5.9.0

mysteriumnetwork/node #6191

5.1.0 → 5.9.0 Minor PR

Open about 1 month ago 1 comment

build(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 in /hack/tools

openshift/hypershift #8503

5.8.0 → 5.9.0 Minor PR

Closed about 1 month ago 7 comments

chore(deps): bump the go_modules group across 16 directories with 6 updates

wailsapp/wails #5432

5.6.2 → 5.9.0 Minor PR

Closed about 1 month ago 1 comment

build(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 in /src/github-sbom-generator

lf-edge/eve-build-tools #67

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 1 comment

Bump github.com/go-git/go-billy/v5 from 5.7.0 to 5.9.0

willfish/forte #149

5.7.0 → 5.9.0 Minor PR

Open about 1 month ago 2 comments

Bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

arduino/arduino-lint #1092

5.8.0 → 5.9.0 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

aziontech/azion #1465

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 7 comments

chore(deps): bump the go_modules group across 1 directory with 13 updates

coutureb/goreleaser #11

5.6.1 → 5.9.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the gomod-minor-and-patch group across 1 directory with 19 updates

speakeasy-api/speakeasy #2038

5.6.2 → 5.9.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

mallardduck/dirio #52

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the go-dependencies group across 1 directory with 13 updates

ConfigButler/gitops-reverser #139

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 1 comment

deps(deps): bump the gomod-minor-and-patch group across 1 directory with 32 updates

simple-container-com/api #252

5.8.0 → 5.9.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the go-minor-patch group across 1 directory with 28 updates

dmgoldstein1/syft #34

5.7.0 → 5.8.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the go-minor-patch group across 1 directory with 27 updates

Hadiiii16/SBOM_EMB #12

5.7.0 → 5.8.0 Minor PR

Open about 1 month ago 1 comment

chore(deps): bump the go-minor-patch group across 1 directory with 26 updates

Hadiiii16/SBOM_EMB #10

5.7.0 → 5.8.0 Minor PR

Closed about 2 months ago 2 comments

chore(deps): bump the go-minor-patch group across 1 directory with 26 updates

dmgoldstein1/syft #26

5.7.0 → 5.8.0 Minor PR

Closed about 2 months ago 3 comments

chore(deps): bump the gomod-minor-and-patch group across 1 directory with 20 updates

speakeasy-api/speakeasy #2021

5.6.2 → 5.8.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the gomod-minor-and-patch group across 1 directory with 21 updates

speakeasy-api/speakeasy #2011

5.6.2 → 5.8.0 Minor PR

Closed 2 months ago 1 comment

build(deps): bump the build group across 1 directory with 56 updates

open-policy-agent/eopa #360

5.7.0 → 5.8.0 Minor PR

Open 2 months ago 1 comment

build(deps): bump the dependencies group across 1 directory with 12 updates

nektos/act #6056

5.6.2 → 5.8.0 Minor PR

Closed 2 months ago 1 comment

Bump the go-minor-and-patch-updates group across 1 directory with 7 updates

GoogleCloudPlatform/cluster-toolkit #5356

5.7.0 → 5.8.0 Minor PR

Closed 3 months ago 4 comments

chore(deps): bump the gomod-minor-and-patch group across 1 directory with 21 updates

speakeasy-api/speakeasy #1972

5.6.2 → 5.8.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the go-minor-patch group across 1 directory with 7 updates

anchore/syft #4656

5.7.0 → 5.8.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the go-dependencies group across 1 directory with 6 updates

interlynk-io/sbomqs #629

5.7.0 → 5.8.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the gomod-minor-and-patch group across 1 directory with 19 updates

speakeasy-api/speakeasy #1945

5.6.2 → 5.8.0 Minor PR

Closed 3 months ago 1 comment

chore: bump github.com/go-git/go-billy/v5 from 5.7.0 to 5.8.0

thenativeweb/get-next-version #176

5.7.0 → 5.8.0 Minor PR

Open 3 months ago 1 comment

build(deps): bump github.com/go-git/go-billy/v5 from 5.7.0 to 5.8.0

bluenviron/mediamtx #5514

5.7.0 → 5.8.0 Minor PR

Closed 4 months ago 1 comment

build(deps): bump github.com/go-git/go-billy/v5 from 5.7.0 to 5.8.0

wolfi-dev/wolfictl #1884

5.7.0 → 5.8.0 Minor PR

Closed 4 months ago 2 comments

Package Details

Name:	`github.com/go-git/go-billy/v5`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/go-git/go-billy/v5`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/go-git/go-billy
Homepage:	https://github.com/go-git/go-billy
Latest Release:	`v5.6.2` over 1 year ago
Dependent Repos:	13,460
Dependent Packages:	7,221
Ranking:	Top 0.0654% by dependent repos Top 0.0446% by dependent pkgs

PR Status

Open 48 (40.0%)

Merged 0 (0.0%)

Closed 62 (51.7%)

PR Types

Minor 96 (80.0%)

Patch 14 (11.7%)