A vulnerability in go-git's index decoder for Git index format version 4 allows a specially crafted index file to cause a runtime panic due to an out-of-bounds slice operation. This can lead to denial-of-service if the application using go-git does not handle panics. The issue requires write access to the local .git directory to inject the malicious index file. Versions prior to 5.17.1 are affected.