An open index of dependabot pull requests across open source projects.

github.com/go-git/go-git/v5

Ecosystem:
go
Package URL:
pkg:golang/github.com/go-git/go-git/v5
Total PRs:
2,716 Dependabot PRs
Latest PR:
about 7 hours ago
Unique Repositories:
1,117 repositories
Unique Repos (30 days):
95 repositories
Security Advisories
go-git: Maliciously crafted idx file can cause asymmetric memory consumption
GHSA-jhf3-xxhw-2wpp CVE-2026-34165 MODERATE published 2 months ago • updated 3 days ago
### Impact A vulnerability has been identified in which a maliciously crafted `.idx` file can cause asymmetric memory consumption, potentially exh...
go-git: Malformed Git object data may cause panics or resource exhaustion
GHSA-w5pp-99ch-qj29 MODERATE published 4 days ago • updated 3 days ago
### Impact Several denial-of-service issues were identified in `go-git` when parsing maliciously crafted Git repository data. An attacker may craf...
go-git: Credential leak via cross-host redirect in smart HTTP transport
GHSA-3xc5-wrhm-f963 CVE-2026-41506 MODERATE published about 2 months ago • updated 5 days ago
### Impact `go-git` may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. If a remote re...
go-git improperly verifies data integrity values for .idx and .pack files
GHSA-37cx-329c-33x3 CVE-2026-25934 MODERATE published 4 months ago • updated 13 days ago
### Impact A vulnerability was discovered in `go-git` whereby data integrity values for `.pack` and `.idx` files were not properly verified. This...
go-git missing validation decoding Index v4 files leads to panic
GHSA-gm2x-2g9h-ccm8 CVE-2026-33762 LOW published 2 months ago • updated 3 days ago
### Impact `go-git`’s index decoder for format version 4 fails to validate the path name prefix length before applying it to the previously decode...
Recent PRs (filtered by: Open , Patch PRs )
Package Details
Name: github.com/go-git/go-git/v5
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/go-git/go-git/v5
JSON API: View JSON
Security Advisories

12

Active advisories
CRITICAL 2
HIGH 3
MODERATE 5
LOW 2
View All golang Advisories
Package Information
Description:

A highly extensible git implementation in pure Go. go-git aims to reach the completeness of libgit2 or jgit, nowadays covers the majority of the plumbing read operations and some of the main write operations, but lacks the main porcelain operations such as merges. It is highly extensible, we have been following the open/close principle in its design to facilitate extensions, mainly focusing the efforts on the persistence of the objects.

Repository: https://github.com/go-git/go-git
Homepage: https://github.com/go-git/go-git
Latest Release: v5.16.1
12 months ago
Dependent Repos: 13,417
Dependent Packages: 8,164
Ranking: Top 0.0657% by dependent repos Top 0.0353% by dependent pkgs
PR Status
Open 1,203 (44.3%)
Merged 308 (11.3%)
Closed 960 (35.3%)
PR Types
Minor 1,400 (51.5%)
Patch 1,071 (39.4%)