CVE-2026-123533

The gix-commitgraph component, used in gitoxide before version 0.61.0, is vulnerable to a Denial of Service (DoS) condition. The issue stems from the commit-graph parser failing to validate parent graph positions against the declared commit count and failing to verify 4-byte alignment for the EDG...