Executive brief
go-git: Malformed Git object data may cause panics or resource exhaustion
Affected products
- Go github.com/go-git/go-git/v5
- Go github.com/go-git/go-git/v6
Junglewise Threat Intelligence
go-git: Malformed Git object data may cause panics or resource exhaustion
Severity: low · CVSS 3.1 · Published 2026-05-29
Technologies: github.com/go-git/go-git/v5 (Go), github.com/go-git/go-git/v6 (Go). Vendors: Go.
Related threats
- go-git path traversal via malicious reference names
- go-git symlink traversal in worktree operations
- GO-2026-5693 - Go-git: Malformed Git object data may cause panics or resource exhaustion in github.com/go-git/go-git
- go-git DoS via malformed Git object data
- go-git path traversal via crafted repository data