https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 04:58:04 +0000 https://db.gcve.eu/vuln/ghsa-r9px-m959-cxf4 <p><strong>Affected:</strong> Go: gopkg.in/src-d/go-git.v4, Go: github.com/go-git/go-git/v5, Go: github.com/go-git/go-git</p> <p>### Impact A denial of service (DoS) vulnerability was discovered in go-git versions prior to `v5.13`. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in `go-git` clients.</p> <p>This is a `go-git` implementation issue and does not affect the upstream `git` cli.</p> <p>### Patches Users running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.13` in order to mitigate this vulnerability.</p> <p>### Workarounds In cases where a bump to the latest version of `go-git` is not possible, we recommend limiting its use to only trust-worthy Git servers.</p> <p>## Credit Thanks to Ionut Lalu for responsibly disclosing this vulnerability to us.</p> <p><strong>Affected:</strong> Go: gopkg.in/src-d/go-git.v4, Go: github.com/go-git/go-git/v5, Go: github.com/go-git/go-git</p> <p>### Impact A denial of service (DoS) vulnerability was discovered in go-git versions prior to `v5.13`. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in `go-git` clients.</p> <p>This is a `go-git` implementation issue and does not affect the upstream `git` cli.</p> <p>### Patches Users running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.13` in order to mitigate this vulnerability.</p> <p>### Workarounds In cases where a bump to the latest version of `go-git` is not possible, we recommend limiting its use to only trust-worthy Git servers.</p> <p>## Credit Thanks to Ionut Lalu for responsibly disclosing this vulnerability to us.</p> https://db.gcve.eu/vuln/ghsa-r9px-m959-cxf4