GO-2026-4473
Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git
At a glance
- Published
- Updated
- CVE
- CVE-2026-25934
- Aliases
- GHSA-37cx-329c-33x3
Description
Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/go-git/go-git | introduced 0 |
| Go · github.com/go-git/go-git/v4 | introduced 0 |
| Go · github.com/go-git/go-git/v5 | introduced 0, fixed 5.16.5 |
References
- https://github.com/go-git/go-git/security/advisories/GHSA-37cx-329c-33x3 ADVISORY
- https://github.com/go-git/go-git/releases/tag/v5.16.5 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |