CVE-2026-82254
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Aug 28, 2026
Vendor
unknown
Description
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.