CVE record · 1 source
CVE-2026-123533
CVSS 5.5gix-commitgraph before 0.42.0, as used in gitoxide before 0.61.0, contains a denial of service vulnerability because its commit-graph parser does not…
- Vendor
- GitoxideLabs
- Product
- gitoxide
- CVSS v3.1
- 5.5 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weakness
- CWE-248
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
gix-commitgraph before 0.42.0, as used in gitoxide before 0.61.0, contains a denial of service vulnerability because its commit-graph parser does not…
gix-commitgraph before 0.42.0, as used in gitoxide before 0.61.0, contains a denial of service vulnerability because its commit-graph parser does not validate parent graph positions against the declared commit count or check the…