Threats tagged 'brew-jiratui-cve-2026-110856'

Jiratui's GitPython integration has a vulnerability in the parse_actor_and_date() function causing quadratic backtracking on malformed author/committer/tagger lines missing or having malformed trailing epoch or timezone data. This leads to CPU exhaustion when processing crafted commit or tag objects. The issue persists in version 3.1.62 despite a prior fix in 3.1.60 for a related regex. Accessing affected commit or tag fields on malicious objects can cause significant delays, impacting CI tooling, repository scanners, and code-hosting integrations.