CVE-2026-82669

MEDIUM 5.3

klaussilveira GitList XML Parsing CommandLine.php SimpleXMLElement denial of service

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 3.0.0-beta can resolve this issue. The patch is named f67609d52c1812fa8a7ed80eae5e795cfd72115f. It is advisable to upgrade the affected component.

CWE	CWE-404
Vendor	klaussilveira
Product	gitlist
Published	Aug 31, 2026

Stay Ahead of the Next One

Get instant alerts for klaussilveira gitlist

Be the first to know when new medium vulnerabilities affecting klaussilveira gitlist are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

klaussilveira / GitList

2.0.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/397168 vuldb.com: https://vuldb.com/vuln/397168/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82669 vuldb.com: https://vuldb.com/submit/893867 github.com: https://github.com/klaussilveira/gitlist/issues/948 github.com: https://github.com/klaussilveira/gitlist/commit/f67609d52c1812fa8a7ed80eae5e795cfd72115f github.com: https://github.com/klaussilveira/gitlist/releases/tag/3.0.0-beta github.com: https://github.com/klaussilveira/gitlist/

Credits

🔍 iswangxy (VulDB User)