DotGit

DotGit 訪問したWebサイトで.gitが露出していないか確認するための拡張機能 特徴 訪問した各サイトに.git/.svn/.hgフォルダが存在するか確認 訪問した各サイトに.envファイルが存在するか確認 訪問した各サイトに.DSStoreファイルが存在するか確認 サイトがオープンソース（github/gitlab）かどうかを確認 サイトにsecurity.txtがあるか確認 フォルダが見つかった場合は通知 見つかった露出サイトの一覧 サイト上にファイルがリストされていなくても、.gitフォルダ全体をzip形式でダウンロード ワンクリックで.git/configを表示...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intended reference storage by supplying specially crafted reference names containing path traversal sequences. Th...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intended reference storage by supplying specially crafted reference names containing path traversal sequences. Th...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intended reference storage by supplying specially crafted reference names containing path traversal sequences. Th...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intended reference storage by supplying specially crafted reference names containing path traversal sequences. Th...

Directory Traversal

Overview github.com/go-git/go-git/v5/plumbing is a highly extensible git implementation library written in pure Go. Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intend...

go-git: Malicious reference names may modify files outside the reference storage

Impact A path traversal issue in go-git could allow malicious reference names to access files outside the repository's intended reference storage. Loose references are stored under .git/. The reference name was previously used as a path without verifying that the resolved path remained within the...

Directory Traversal

Overview github.com/go-git/go-git/plumbing is a highly extensible git implementation library written in pure Go. Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intended...

GHSA-QGQ7-7HM3-Q39J go-git: Malicious reference names may modify files outside the reference storage

Impact A path traversal issue in go-git could allow malicious reference names to access files outside the repository's intended reference storage. Loose references are stored under .git/. The reference name was previously used as a path without verifying that the resolved path remained within the...

PT-2026-69080

Name of the Vulnerable Software and Affected Versions go-git versions prior to 5.19.2 go-git versions prior to 6.0.0-alpha.5 Description Reference names are not sanitized before being used to construct on-disk paths under the reference storage directory. A maliciously crafted reference name...

Mozilla: Insecure S3 Bucket Exposing Git Directory in Mozilla Foundation Infographics Project

Git configuration was leaked in one of the S3 buckets used by Mozilla Foundation Infographics Project. The configuration included an old Github access token which was no longer valid. We restricted access to the .git directory on the bucket...