CVE-2025-21614
go-git clients vulnerable to DoS via maliciously crafted Git server replies
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
go-git clients vulnerable to DoS via maliciously crafted Git server replies
go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability.
Reserved 2024-12-29 | Published 2025-01-06 | Updated 2025-01-06 | Assigner GitHub_MCWE-400: Uncontrolled Resource Consumption
github.com/...go-git/security/advisories/GHSA-r9px-m959-cxf4
Support options
