Go/github.com/go-git/go-git/v5: unknown

Go-git: Malformed Git object data may cause panics or resource exhaustion in github.com/go-git/go-git

Action: Upgrade github.com/go-git/go-git/v5 to 5.19.1 or later.

go get github.com/go-git/go-git/v5@v5.19.1

Affected

Fixed versions

Sources

• osv: GO-2026-5693
• https://github.com/go-git/go-git/security/advisories/GHSA-w5pp-99ch-qj29

published 2026-07-24T18:35:55Z · modified 2026-08-08T21:41:53.842320888Z · JSON