An open index of dependabot pull requests across open source projects.

github.com/go-git/go-git/v5

Ecosystem:
go
Package URL:
pkg:golang/github.com/go-git/go-git/v5
Total PRs:
2,727 Dependabot PRs
Latest PR:
11 days ago
Unique Repositories:
1,121 repositories
Unique Repos (30 days):
1 repository
Security Advisories
go-git: Malformed Git object data may cause panics or resource exhaustion
GHSA-w5pp-99ch-qj29 MODERATE published about 2 months ago • updated about 1 month ago
### Impact Several denial-of-service issues were identified in `go-git` when parsing maliciously crafted Git repository data. An attacker may craf...
go-git improperly verifies data integrity values for .idx and .pack files
GHSA-37cx-329c-33x3 CVE-2026-25934 MODERATE published 6 months ago • updated about 1 month ago
### Impact A vulnerability was discovered in `go-git` whereby data integrity values for `.pack` and `.idx` files were not properly verified. This...
go-git has an Argument Injection via the URL field
GHSA-v725-9546-7q7m CVE-2025-21613 CRITICAL published over 1 year ago • updated 2 days ago
### Impact An argument injection vulnerability was discovered in `go-git` versions prior to `v5.13`. Successful exploitation of this vulnerabilit...
go-git: Improper single-quote escaping in go-git SSH transport
GHSA-m7cr-m3pv-hgrp CVE-2026-45570 LOW published 2 months ago • updated 12 days ago
### Impact `go-git`'s SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single qu...
go-git's improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git
GHSA-389r-gv7p-r3rp CVE-2026-45022 HIGH published 3 months ago • updated 10 days ago
### Impact `go-git` may parse malformed Git objects in a way that differs from upstream Git. When `commit` or `tag` objects contain ambiguous or ma...
Recent PRs
Package Details
Name: github.com/go-git/go-git/v5
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/go-git/go-git/v5
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 2
HIGH 3
MODERATE 5
LOW 2
View All golang Advisories
Package Information
Description:

A highly extensible git implementation in pure Go. go-git aims to reach the completeness of libgit2 or jgit, nowadays covers the majority of the plumbing read operations and some of the main write operations, but lacks the main porcelain operations such as merges. It is highly extensible, we have been following the open/close principle in its design to facilitate extensions, mainly focusing the efforts on the persistence of the objects.

Repository: https://github.com/go-git/go-git
Homepage: https://github.com/go-git/go-git
Latest Release: v5.16.1
about 1 year ago
Dependent Repos: 13,417
Dependent Packages: 8,164
Ranking: Top 0.0657% by dependent repos Top 0.0353% by dependent pkgs
PR Status
Open 1,210 (44.4%)
Merged 308 (11.3%)
Closed 964 (35.4%)
PR Types
Minor 1,410 (51.7%)
Patch 1,072 (39.3%)