Executive brief
Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4
Affected products
- Go gopkg.in/src-d/go-git.v4
- Go github.com/go-git/go-git/v5
Junglewise Threat Intelligence
CVE-2023-49568: GO-2024-2466 - Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4
CVE-2023-49568 · Severity: low · CVSS 3.1 · Published 2024-01-23
Technologies: gopkg.in/src-d/go-git.v4 (Go), github.com/go-git/go-git/v5 (Go). Vendors: Go.
Related threats
- go-git path traversal via malicious reference names
- go-git symlink traversal in worktree operations
- GO-2026-5693 - Go-git: Malformed Git object data may cause panics or resource exhaustion in github.com/go-git/go-git
- go-git DoS via malformed Git object data
- go-git: Malformed Git object data may cause panics or resource exhaustion