rootio-dulwich vulnerabilities (Root)

3 vulnerabilities.

• rootio-dulwich Root Dulwich has unbounded memory allocation in receive-pack from crafted thin packs CVE-2026-47734 Fix available 5.7 MediumJune 8, 2026
• rootio-dulwich Root Dulwich Vulnerable to Command Injection via Merge Driver Path CVE-2026-42563 Fix available 7.7 HighMay 28, 2026
• rootio-dulwich Root Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows CVE-2026-42305 Fix available 8.8 HighMay 28, 2026