Back to the CVE list

CVE-2026-63476

isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)

CVSS score

4.3

EPSS probability

—

Risk score

0.4

Published

5 h ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

8.8

CVE-2026-63395isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)

Vendorisomorphic-git Productisomorphic-git

Patch status unknown5 h ago

5.3

CVE-2026-63478isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout

Vendorisomorphic-git Productisomorphic-git

Patch status unknown5 h ago

4.3

CVE-2026-63475isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)

Vendorisomorphic-git Productisomorphic-git

Patch status unknown5 h ago

7.1

CVE-2026-89011isomorphic-git < 1.42.0 Prototype Pollution via getRemoteInfo

Vendorisomorphic-git Productisomorphic-git

Patch verifiedEPSS %01 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-63476"

CVE-2026-63476 · isomorphic-git: Unbounded memory allocation…