vulnerabilities from original libgit2 not fixed here

[dm9pZCAq]

there are few vulnerabilities which is fixed in original libgit2 which is still present in this fork: https://github.com/libgit2/libgit2/security

[romkatv]

This fork is used only by gitstatusd. These functions aren't used there.

[dm9pZCAq]

revparse is used but it looks like this part is before vulnerability is introduced

https://github.com/romkatv/libgit2/blob/2ecf33948a4df9ef45a66c68b8ef24a5e60eaac6/src/revparse.c#L773-L790

[romkatv]

Thanks for checking!