gix-worktree vulnerabilities (crates.io)

3 vulnerabilities.

• gix-worktree crates.io gitoxide does not detect SHA-1 collision attacks CVE-2025-31130 Fix available 6.8 MediumApril 3, 2025
• gix-worktree crates.io gix refs and paths with reserved Windows device names access the devices CVE-2024-35197 Fix available 5.4 MediumMay 22, 2024
• gix-worktree crates.io gix traversal outside working tree enables arbitrary code execution CVE-2024-35186 Fix available 8.8 HighMay 22, 2024