tocsin

CVE-2026-82254

1 advisory.

crates.io/gix-pack CVE-2026-82254: high, EPSS 0.49%

gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data

Action: Upgrade gix-pack to 0.69.0 or later.

cargo update -p gix-pack --precise 0.69.0

Affected

introducedfixedlast affected
00.69.0-

Fixed versions

0.69.0

Sources

CVE-2026-82254 · published · modified · JSON