{"action":"Upgrade gix-pack to 0.69.0 or later.","affected":[{"fixed":"0.69.0","introduced":"0"}],"component":"gix-pack","cve_ids":["CVE-2026-82254"],"ecosystem":"crates.io","epss":0.00488,"exploited":false,"fixed_versions":["0.69.0"],"ghsa_id":"GHSA-x494-mj8g-cj27","id":"tcs_01M5KF4GA4XAGJW5FGFNFZ8T5N","modified_at":"2026-09-10T03:50:48.020282872Z","published_at":"2026-05-05T19:24:15Z","references":["https://osv.dev/vulnerability/GHSA-x494-mj8g-cj27","https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-x494-mj8g-cj27","https://github.com/GitoxideLabs/gitoxide"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-x494-mj8g-cj27","url":"https://osv.dev/vulnerability/GHSA-x494-mj8g-cj27"}],"summary":"gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data"}