Threats tagged 'brew-conda-lock-cve-2026-47734'

CVE-2026-47734 is a denial-of-service vulnerability in Dulwich, a Python Git library, caused by unbounded memory allocation when processing crafted thin packs during git push operations. An attacker with push access can send a tiny crafted thin pack that declares a large destination size, causing Dulwich to allocate excessive memory and potentially exhaust system resources. This affects Dulwich-based Git servers exposing git-receive-pack functionality. The issue is patched in Dulwich version 1.2.5 and later.