VulnSea

go-git_project has 2 CVEs on record. The median CVSS is 3.9 (low).

CVEs per month

Last 12 months, by publish date

101112010203040506070809
Exploited share
0% vs 1% corpus
Median CVSS
3.9
Publish → KEV
—
Last 90 days
0 prev 2

Products

  • go-git 2
Follow go-git_project:RSS feedSave a search →Embed badge ↗
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

go-git_project vulnerabilities

CVEs affecting go-git_project, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-34165Medium· 5.0
5mo ago

go-git is an extensible git implementation library written in pure Go

go-git is an extensible git implementation library written in pure Go. From version 5.0.0 to before version 5.17.1, a vulnerability has been identified in which a maliciously crafted .idx file can cause asymmetric memory consumption, pot…

▾ Sunlitgo-git_project · go-gitEPSS 0.15%via NVD
CVE-2026-33762Low· 2.8
5mo ago

go-git is an extensible git implementation library written in pure Go

go-git is an extensible git implementation library written in pure Go. Prior to version 5.17.1, go-git’s index decoder for format version 4 fails to validate the path name prefix length before applying it to the previously decoded path n…

▾ Sunlitgo-git_project · go-gitEPSS 0.15%via NVD
go-git_project vulnerabilities (CVEs) · VulnSea