An open index of dependabot pull requests across open source projects.

github.com/go-git/go-git/v5

Ecosystem:
go
Package URL:
pkg:golang/github.com/go-git/go-git/v5
Total PRs:
2,725 Dependabot PRs
Latest PR:
12 days ago
Unique Repositories:
1,120 repositories
Unique Repos (30 days):
50 repositories
Security Advisories
go-git: Malformed Git object data may cause panics or resource exhaustion
GHSA-w5pp-99ch-qj29 MODERATE published 17 days ago • updated 5 days ago
### Impact Several denial-of-service issues were identified in `go-git` when parsing maliciously crafted Git repository data. An attacker may craf...
go-git: Credential leak via cross-host redirect in smart HTTP transport
GHSA-3xc5-wrhm-f963 CVE-2026-41506 MODERATE published about 2 months ago • updated 5 days ago
### Impact `go-git` may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. If a remote re...
go-git improperly verifies data integrity values for .idx and .pack files
GHSA-37cx-329c-33x3 CVE-2026-25934 MODERATE published 4 months ago • updated 4 days ago
### Impact A vulnerability was discovered in `go-git` whereby data integrity values for `.pack` and `.idx` files were not properly verified. This...
Maliciously crafted Git server replies can cause DoS on go-git clients
GHSA-mw99-9chc-xw7r CVE-2023-49568 HIGH published over 2 years ago • updated 1 day ago
### Impact A denial of service (DoS) vulnerability was discovered in go-git versions prior to `v5.11`. This vulnerability allows an attacker to per...
go-git: Improper single-quote escaping in go-git SSH transport
GHSA-m7cr-m3pv-hgrp CVE-2026-45570 LOW published 27 days ago • updated 6 days ago
### Impact `go-git`'s SSH transport constructs the remote exec command by wrapping the repository path in single quotes without escaping single qu...
Recent PRs (filtered by: Patch PRs )
Package Details
Name: github.com/go-git/go-git/v5
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/go-git/go-git/v5
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 2
HIGH 3
MODERATE 5
LOW 2
View All golang Advisories
Package Information
Description:

A highly extensible git implementation in pure Go. go-git aims to reach the completeness of libgit2 or jgit, nowadays covers the majority of the plumbing read operations and some of the main write operations, but lacks the main porcelain operations such as merges. It is highly extensible, we have been following the open/close principle in its design to facilitate extensions, mainly focusing the efforts on the persistence of the objects.

Repository: https://github.com/go-git/go-git
Homepage: https://github.com/go-git/go-git
Latest Release: v5.16.1
about 1 year ago
Dependent Repos: 13,417
Dependent Packages: 8,164
Ranking: Top 0.0657% by dependent repos Top 0.0353% by dependent pkgs
PR Status
Open 1,210 (44.4%)
Merged 308 (11.3%)
Closed 962 (35.3%)
PR Types
Minor 1,408 (51.7%)
Patch 1,072 (39.3%)