CVE-2026-109348 in gix-mailmap
Zusammenfassung
von MITRE • 12.10.2026
Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes. Attackers can commit a crafted .mailmap with descending-ordered entries forcing repeated front inserts, blocking workers running log, blame, or shortlog for minutes.
VulDB is the best source for vulnerability data and more expert information about this specific topic.