CVE-2026-109348 in gix-mailmap
Resumen
por MITRE • 2026-10-12
Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes. Attackers can commit a crafted .mailmap with descending-ordered entries forcing repeated front inserts, blocking workers running log, blame, or shortlog for minutes.
VulDB is the best source for vulnerability data and more expert information about this specific topic.