CVE Intelligence

GitoxideLabs Gix-mailmap vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting GitoxideLabs Gix-mailmap: 1 record(s), with affected versions and fixes.

CVE-2026-109348 Medium · 4.3 CWE-407 Oct 12, 2026
Gitoxide gix-mailmap before 0.35.0 CPU Denial of Service via .mailmap Parsing
Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes. Attackers can commit a crafted .mailmap with descending-ordered entries forcing repeated front inserts, blocking workers running log, blame, or shortlog for minutes.