CVE-2026-114095

The Dulwich library (versions before 1.2.9 ) is vulnerable to a denial of service (DoS) via an infinite loop in the Pack.resolve_object function. An attacker can trigger infinite recursion by providing a malicious packfile containing self-referential OFS_DELTA objects with a delta_offset of 0. Th...