| CVE-2026-100419 |
gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that…
|
7.3
High
|
Sep 25, 2026 |
| CVE-2026-91986 |
gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing…
|
5.3
Medium
|
Sep 15, 2026 |
| CVE-2025-24890 |
gitoxide is an implementation of git written in Rust
|
6.8
Medium
|
Sep 14, 2026 |
| CVE-2026-82255 |
gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where…
|
7.6
High
|
Aug 28, 2026 |
| CVE-2026-82254 |
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from…
|
8.7
High
|
Aug 28, 2026 |
| CVE-2026-82253 |
gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal vulnerability
|
8.7
High
|
Aug 28, 2026 |
| CVE-2026-82251 |
gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when…
|
8.7
High
|
Aug 28, 2026 |
| CVE-2026-82252 |
gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject…
|
8.7
High
|
Aug 28, 2026 |
| CVE-2026-82250 |
gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs…
|
7.1
High
|
Aug 28, 2026 |
| CVE-2026-82249 |
gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers
|
2.3
Low
|
Aug 28, 2026 |
| CVE-2026-82248 |
gix-worktree-state before 0.33.0 (part of gitoxide) allows writing files outside the worktree on Windows
|
6.0
Medium
|
Aug 28, 2026 |
| CVE-2026-82247 |
gitoxide's gix-url crate…
|
8.7
High
|
Aug 28, 2026 |
| CVE-2026-44471 |
gitoxide is an implementation of git written in Rust
|
7.8
High
|
May 13, 2026 |
| CVE-2026-0810 |
Gix-date: gix-date: undefined behavior due to invalid string generation
|
7.1
High
|
Jan 26, 2026 |
| CVE-2025-31130 |
gitoxide is an implementation of git written in Rust
|
6.8
Medium
|
Apr 4, 2025 |
| CVE-2025-22620 |
gitoxide is an implementation of git written in Rust
|
5.0
Medium
|
Jan 20, 2025 |