Skip to content
OpenAdvisories

Package · Go

gopkg.in/src-d/go-git.v4

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    go-git clients vulnerable to DoS via maliciously crafted Git server replies

    go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing spec…

  • High 7.5

    Maliciously crafted Git server replies can cause DoS on go-git clients

    A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion …