VDB
GHSA-2vh6-hw4j-32ww
GHSA-2vh6-hw4j-32ww
PUBLISHED
CVSS 6.5 MEDIUM
gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS)
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| crates.io | gix-packetline | 0 |
| chainguard | cargo-audit | 0 |
| wolfi | cargo-audit | 0 |
Timeline
- Aug 28, 2026 CVE Published
References
- https://github.com/advisories/GHSA-2vh6-hw4j-32ww advisory
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-2vh6-hw4j-32ww url
- https://github.com/GitoxideLabs/gitoxide/pull/2638 patch
- https://github.com/GitoxideLabs/gitoxide/commit/4bef04ae8a261634200b3a6faabdd77e25aeb8c1 patch
- https://github.com/GitoxideLabs/gitoxide/releases/tag/gix-packetline-v0.21.5 url