Vulnerabilities in GitoxideLabs

5 results

CVE-2025-22620MEDIUMgix-worktree-state nonexclusive checkout sets executable files world-writableEPSS 0.4%CVE-2026-44471HIGHgitoxide: Symlink prefix-reuse allows worktree escape during checkoutEPSS 0.2%CVE-2025-31130MEDIUMgitoxide does not detect SHA-1 collision attacksEPSS 0.2%CVE-2026-0810HIGHGix-date: gix-date: undefined behavior due to invalid string generationEPSS 0.2%CVE-2023-53158MEDIUMThe gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: EPSS 0.2%