Skip to content
OpenAdvisories

Package · Debian

rust-gix-commitgraph

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5

    Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File

    gix-commitgraph before 0.42.0, as used in gitoxide before 0.61.0, contains a denial of service vulnerability because its commit-graph parser does not validate parent graph positions against the declared commit count or check the EDGE chunk length for 4-byte a…