High severity7.5NVD Advisory· Published Aug 28, 2026· Updated Aug 28, 2026
CVE-2026-82254
CVE-2026-82254
Description
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versionspkg:rpm/opensuse/cargo-audit&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/cargo-c&distro=openSUSE%20Tumbleweed
< 0.22.2~git0.281452c-3.1+ 1 more
- (no CPE)range: < 0.22.2~git0.281452c-3.1
- (no CPE)range: < 0.10.25-1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.