VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/github/git-sizer: vulnerability history, versions and safety

github.com/github/git-sizer is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Feb 2022 to Aug 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/github/git-sizer vulnerabilities

Vulert verdict on github.com/github/git-sizer v1.5.0 i

Updated on 23 Oct 2026

Action needed: v1.5.0 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 72/100
  • Security Minor issues
  • Maintenance Slowing
  • Popularity Key ecosystem project
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.5.0 — affected i
  • Vulnerabilities on record 2 over 2 years · 0 in the last year i
  • Latest disclosure 21 Aug 2024 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 4,086 i
  • OpenSSF scorecard 4/10 i
  • Last release 59 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/github/git-sizer, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.5.1-0.20260116145001-88eaa80df48d 16 Jan 2026 M1 U1 MIT Yes Details →
v1.5.1-0.20231217172710-b84ee4d41db7 17 Dec 2023 M1 U1 MIT Yes Details →
v1.5.1-0.20231110111234-8452791a05e1 10 Nov 2023 M1 U1 MIT Yes Details →
v1.5.1-0.20230822123852-cc04792d0f4f 22 Aug 2023 M1 U1 MIT Yes Details →
v1.5.1-0.20221212162926-0b6d3a21c6cc 12 Dec 2022 M1 U1 MIT Yes Details →
v1.5.1-0.20221130062037-d1e15af6a7dc 30 Nov 2022 M1 U1 MIT Yes Details →
v1.5.1-0.20221021144551-6ff23aa45a60 21 Oct 2022 M1 U1 MIT Yes Details →
v0.0.0-20211116120232-cc6b856f85a9 16 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211116120232-cc6b856f85a9 16 Nov 2021 M1 U1 MIT Yes Details →
v1.5.0 16 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211116115958-1bd6e3ee7e75 16 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211116115852-b43d62d6c690 16 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211116115120-7dd1823523aa 16 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175105-0532607b104d 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-15487a4f5205 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-1fe34af62d81 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-24c73607bdbb 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-3489e7d3ea8a 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-3faeb539981a 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-4029e5deb7ba 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-53142fbb8338 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-571f31cc859c 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-939c1764d830 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-9dc78e30b06c 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-a075a1bf15a2 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-b3cbef941249 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-bf222edcc80f 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-c444fba62309 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-c8151f9f157b 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-e10532810ae8 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113175035-e655a21c79c8 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113174707-bb80a0138fdf 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211113174342-5370ec28c6e9 13 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211110204246-c991c8e0c843 10 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211110164707-6641fab3f240 10 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107155643-05e05d13792c 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107155643-141b75c064b9 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107155643-631f619ca9f1 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107155643-6778d12e3c8c 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107155643-731aadecf5ad 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107115552-79299d655d2e 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107105204-1458ae5f8bf5 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107105204-4cb432e5c038 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107105204-5677b0d1edd6 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107105204-68e73f72d1d1 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107105204-93e902c332ec 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107104829-6aa6890117e3 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107065950-ca3454014ba7 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211107065023-ba4f15f2c989 07 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211104145158-37ddc22697b1 04 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211104133708-5c8651855cdc 04 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211104133708-93e2cd51277d 04 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211104133708-e6f8d99a242c 04 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211104133244-0308dfd1b2d0 04 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211104133244-14169194b460 04 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211104133244-71dfcef8df2a 04 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211104133244-f3caecba4cf2 04 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211104133244-fd3460ec9cc5 04 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-291df0e3ce90 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-33b4b53f20ae 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-46bc15ca7714 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-4740a650f5ad 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-6a6235e9759a 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-6c39369b11e6 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-790d3afeee49 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-8a0051cb9f79 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-8fa5f3177510 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-c5ed23372564 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-e1e4b3fe6145 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-eac12a854a17 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101224612-ee2696bb6847 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101142636-59f84fa2723f 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101142636-669067d525a0 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101142636-96b7447fa70c 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101142636-ad4269794cd4 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101142636-dce4a1260ad7 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101142620-be2362a80eca 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101101905-cb831015d167 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101101846-530ff9085491 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101101802-04e31f8f56c6 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101101420-643805cd5d38 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211101101420-b70634637e3f 01 Nov 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211027132628-e0ec350a8d57 27 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211027114122-d508da247330 27 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211020135121-9847ad98e2f7 20 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018101521-3d385d32ef0c 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018101521-be29b60f040f 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-03516971b0f2 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-0b0adf1c7c6f 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-136b90183be3 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-164961a1a22f 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-1955ee0f4622 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-1b49fb4cfe20 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-2e0da54abd77 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-33f9c9ebccf3 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-3b20437ab827 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-3ddf88e48ac6 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-554bb8b2c3d9 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-73dae86247fe 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-87e2f1aac2d0 18 Oct 2021 M1 U1 MIT Yes Details →
v1.4.1-0.20211018082133-8aa7551141e4 18 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211018082133-91d9c08af421 18 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211018082133-a067cc39776f 18 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211018082133-a909729ee75b 18 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211018082133-acf2ea773e96 18 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211018082133-c7b9b89dfe59 18 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211018082133-dc635714b0f6 18 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211015160541-b30ab78b146d 15 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211015143804-0cddf11d2761 15 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211015143804-27a84b953029 15 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211015143804-2cb5485e0205 15 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211015143804-544cca079e53 15 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211015143804-8cbe1296ffce 15 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211015143804-c7b767174635 15 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211015143443-878581ff58b8 15 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211007110401-0d882b611e86 07 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20211007105506-1da85bfa4f17 07 Oct 2021 M1 U1 — Yes Details →
v1.4.1-0.20210925110433-26d11a505151 25 Sep 2021 M1 U1 — Yes Details →
v1.4.1-0.20210920105057-a48ad8b59fbb 20 Sep 2021 M1 U1 — Yes Details →
v1.4.1-0.20210920083756-6b1b17d84c58 20 Sep 2021 M1 U1 — Yes Details →

The newest 120 of 294 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1
  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/github/git-sizer

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Arbitrary Code Execution in git-sizer N/A medium 1.4.0 15 Feb 2022
Vulnerability in github.com/github/git-sizer: Running git executable within the repository on Windows N/A unrated 1.4.0 21 Aug 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/github/git-sizer

Is github.com/github/git-sizer safe to use?

Vulert records 2 vulnerabilities for github.com/github/git-sizer in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/github/git-sizer's Vulert package health score?

Vulert scores github.com/github/git-sizer 72/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/github/git-sizer affected?

Yes. v1.5.0, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/github/git-sizer should I use?

v1.5.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/github/git-sizer have?

2 vulnerabilities are recorded for github.com/github/git-sizer in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/github/git-sizer vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/github/git-sizer in the last 12 months, and the oldest entry in this database dates to 15 Feb 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/github/git-sizer are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/github/git-sizer for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/github/git-sizer version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.