`github.com/go-git/go-billy/v5`

Ecosystem:
go

Package URL:
pkg:golang/github.com/go-git/go-billy/v5

Total PRs:
120 Dependabot PRs

Latest PR:
17 days ago

Unique Repositories:
88 repositories

Unique Repos (30 days):
6 repositories

Security Advisories

go-billy has path traversal vulnerabilities

GHSA-qw64-3x98-g7q2 CVE-2026-44973 HIGH published about 1 month ago • updated 7 days ago

### Impact Multiple path traversal issues exist across different components of `go-billy`. Insufficient path sanitization and boundary enforcement ...

go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

GHSA-m3xc-h892-ggx6 CVE-2026-44740 MODERATE published about 1 month ago • updated 7 days ago

### Impact Multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or ex...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the go-modules group with 70 updates

paketo-buildpacks/mri #985

5.6.0 → 5.6.2 Patch PR

Open 10 months ago 1 comment

build(deps): bump the all group in /acceptance with 25 updates

joejstuart/ec-cli #225

5.6.0 → 5.6.2 Patch PR

Open 11 months ago

build(deps): bump the all group across 1 directory with 22 updates

joejstuart/ec-cli #220

5.6.0 → 5.6.2 Patch PR

Open 12 months ago

Bump the go-modules group across 1 directory with 52 updates

pacostas/yarn-install #26

5.6.0 → 5.6.2 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump the go-modules group with 69 updates

idiap/python-packagers #1

5.6.0 → 5.6.2 Patch PR

Closed about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 55 updates

paketo-buildpacks/php-dist #914

5.6.0 → 5.6.2 Patch PR

Open about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 70 updates

paketo-buildpacks/cpython #893

5.6.0 → 5.6.2 Patch PR

Closed about 1 year ago 3 comments

Bump the go-modules group across 1 directory with 51 updates

pacostas/yarn-install #25

5.6.0 → 5.6.2 Patch PR

Closed about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 56 updates

paketo-buildpacks/go-build #808

5.6.0 → 5.6.2 Patch PR

Open about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 56 updates

paketo-buildpacks/go-dist #1019

5.6.0 → 5.6.2 Patch PR

Open about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 54 updates

paketo-buildpacks/bundler #947

5.6.0 → 5.6.2 Patch PR

Closed about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 54 updates

paketo-buildpacks/mri #945

5.6.0 → 5.6.2 Patch PR

Closed about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 54 updates

paketo-buildpacks/go-mod-vendor #850

5.6.0 → 5.6.2 Patch PR

Open about 1 year ago 1 comment

Bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.2

xremap/aur-autoupdater #67

5.6.0 → 5.6.2 Patch PR

Closed over 1 year ago

Package Details

Name:	`github.com/go-git/go-billy/v5`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/go-git/go-billy/v5`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/go-git/go-billy
Homepage:	https://github.com/go-git/go-billy
Latest Release:	`v5.6.2` over 1 year ago
Dependent Repos:	13,460
Dependent Packages:	7,221
Ranking:	Top 0.0654% by dependent repos Top 0.0446% by dependent pkgs

PR Status

Open 48 (40.0%)

Merged 0 (0.0%)

Closed 62 (51.7%)

PR Types

Minor 96 (80.0%)

Patch 14 (11.7%)