Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

src-d/go-git

              master @ 8b0c211
            

Fixes

CVEs

HIGH

Peak severity

66.7%

Coverage

Highlights

Path Traversal: 2 prior fixes. Scrutinize any change in this area.

config/modules.go: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Reading .gitmodules through a symlink can escape the worktree, leading to arbitrary file read or overwrite.

Path Traversal: Submodule paths containing '..' allow directory traversal outside the repository, enabling writes to arbitrary locations.

Auth Bypass: Missing host key verification permits MITM attacks, allowing an attacker to impersonate the remote and intercept or alter data.