Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File
CVE-2026-123533
Summary
According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L).
What does that mean for this vulnerability?
The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.
Products covered
Microsoft Edge (Chromium-based)
Remediation
Release Notes
Vendor-listed fixes
148.0.3967.70
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Updated by Microsoft Security Response Center
The vendor changed the advisory after it was first published.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.