CVE-2026-82669
Medium
Description
A vulnerability was detected in klaussilveira GitList 2.0.0. Affected by this issue is the function SimpleXMLElement of the file src/SCM/System/Git/CommandLine.php of the component XML Parsing. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 3.0.0-beta can resolve this issue. The patch is named f67609d52c1812fa8a7ed80eae5e795cfd72115f. It is advisable to upgrade the affected component.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Gitlist
PublishedAug 31, 2026
First seenAug 31, 2026
Weakness typeCWE-404CWE-404
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gitlist gitlist | 2.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.