medium6.5
CVE-2026-82250
gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines w…
Impact
gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to trigger an index out of bounds panic, aborting the client process during fetch operations without authentication.
Affected products
| Product | Affected versions |
|---|---|
| Gitoxide Gix-Packetline | before 0.21.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.