high7.5
CVE-2026-82254
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack.
Impact
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.
Affected products
| Product | Affected versions |
|---|---|
| Gitoxide | before 0.69.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.