Product by Go

    Gopkg.in/src-d/go-git.v4

    4 known vulnerabilities in Gopkg.in/src-d/go-git.v4 (Go), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gopkg.in/src-d/go-git.v4 (Go)
    CriticalCVE-2023-49569

    Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

    also in 3 other products

    		9.8
    CriticalCVE-2025-21613

    go-git has an Argument Injection via the URL field

    also in 3 other products

    		9.8
    HighCVE-2025-21614

    go-git clients vulnerable to DoS via maliciously crafted Git server replies

    also in 4 other products

    		7.5
    HighCVE-2023-49568

    Maliciously crafted Git server replies can cause DoS on go-git clients

    also in 3 other products

    		7.5

    All products by Go