Go-git: denial of service vulnerability via malformed Pack files

The go-git library is affected by a vulnerability enabling denial of service via malformed Pack or Idx files.

Published 10sem1 sourceNotable

≈ 22sSpeed

The fact

An attacker could trigger a fatal error by exploiting the faulty handling of these Git files.

An update to this dependency is recommended for applications using this library.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on May 13, 2026