Skip to content
OpenAdvisories

Package · Ubuntu

dulwich

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-114095

    Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object

    Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows attackers to cause infinite recursion via self-referential OFS_DELTA objects. Attackers can supply a malicious packfile with an OFS_DELTA delta_offset of 0 to e…

    jelmer dulwich dulwich dulwich Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2026-38974

    Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramiko_vendor.py.

    dulwich dulwich Debian Ubuntu
  • Medium 5.7
    CVE-2026-47734

    Dulwich has unbounded memory allocation in receive-pack from crafted thin packs

    Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.1.0 and prior to version 1.2.5, a client with push access could push a tiny crafted thin pack (~174 bytes) whose delta header declares a huge dest_size. When …

    jelmer dulwich dulwich dulwich Debian Ubuntu PyPI