CVE-2026-82254 — gitoxide before 0.69.0 Denial of Service via gix-pack
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send craft…
Published: 2026-08-28 · CVSS: 8.7 · CVSS 4.0
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7