| Reporter | Title | Published | Views | Family All 35 |
|---|---|---|---|---|
 | The vulnerability of the Python library for working with Git repositories in Dulwich, related to uncontrolled resource consumption, allows a hacker to cause a service failure. | 31 Jul 202600:00 | – | bdu_fstec |
 | CVE-2026-47734 | 11 Jun 202601:57 | – | circl |
 | Dulwich 资源管理错误漏洞 | 10 Jun 202600:00 | – | cnnvd |
 | CVE-2026-47734 Dulwich has unbounded memory allocation in receive-pack from crafted thin packs | 10 Jun 202622:11 | – | cvelist |
 | CVE-2026-47734 | 10 Jun 202622:11 | – | debiancve |
 | EUVD-2026-36193 | 10 Jun 202622:11 | – | euvd |
 | [SECURITY] Fedora 44 Update: python-dulwich-1.2.9-1.fc44 | 12 Jul 202601:12 | – | fedora |
 | Fedora 44 : python-dulwich (2026-fbd55e52fb) | 12 Jul 202600:00 | – | nessus |
| SUSE SLED15 / SLES15 Security Update : python3-dulwich (SUSE-SU-2026:2984-1) | 15 Jul 202600:00 | – | nessus |
| SUSE SLES12 Security Update : python-dulwich (SUSE-SU-2026:3117-1) | 18 Jul 202600:00 | – | nessus |
10
[
{
"vendor": "jelmer",
"product": "dulwich",
"versions": [
{
"version": ">= 0.1.0, < 1.2.5",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| delta header dest_size | request body | /git-receive-pack | Pushes using dulwich can cause oversized memory allocation based on attacker-controlled dest_size in the delta header of a thin pack, leading to potential DoS on server memory. | CWE-400, CWE-789 |
| add_thin_pack | request body | /git-receive-pack | Pushes using dulwich can cause oversized memory allocation based on attacker-controlled dest_size in the delta header of a thin pack, leading to potential DoS on server memory. | CWE-400, CWE-789 |
| receive.maxInputSize | request body | /git-receive-pack | Pushes using dulwich can cause oversized memory allocation based on attacker-controlled dest_size in the delta header of a thin pack, leading to potential DoS on server memory. | CWE-400, CWE-789 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Jul 2026 09:10Current
5.4Medium risk
Vulners AI Score5.4
CVSS 3.15.7
EPSS0.00188
SSVC