VYPR

gix-mailmap

by Gitoxide

CVEs (1)

  • CVE-2026-109348MedOct 12, 2026
    risk 0.21cvss 4.3epss —

    Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes. Attackers can commit a crafted .mailmap with descending-ordered entries forcing repeated front inserts,…