Skip to content
Gitoxidelabs vulnerabilities
Newest
-
gitoxidelabs gix-pack
Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count
CVE-2026-109351
Fix available
7.1 High
-
gitoxidelabs gix-pack
Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance
CVE-2026-109350
Fix available
7.1 High
-
gitoxidelabs gix-pack
gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header
CVE-2026-109349
Fix available
7.1 High
-
gitoxidelabs gix-mailmap
Gitoxide gix-mailmap before 0.35.0 CPU Denial of Service via .mailmap Parsing
CVE-2026-109348
5.3 Medium
-
gitoxidelabs gitoxide
gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
CVE-2026-100419
Fix available
7.3 High
-
gitoxidelabs gitoxide
gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection
CVE-2026-91986
Fix available
5.3 Medium
-
gitoxidelabs gitoxide
gix-sec safe.directory protections absent for elevated administrators
CVE-2025-24890
Fix available
6.8 Medium
-
gitoxidelabs gitoxide
gitoxide gix-packetline before 0.21.5 Denial of Service
CVE-2026-82250
Fix available
7.1 High
-
gitoxidelabs gitoxide
gitoxide before 0.38.2 Credential Helper Protocol Field Injection
CVE-2026-82249
Fix available
2.3 Low
-
gitoxidelabs gitoxide
gitoxide before 0.33.0 Path Traversal via symlink following
CVE-2026-82248
6.0 Medium
-
gitoxidelabs gitoxide
gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing
CVE-2026-82247
Fix available
8.7 High
-
gitoxidelabs gitoxide, gix-fs +1 more
gitoxide: Symlink prefix-reuse allows worktree escape during checkout
CVE-2026-44471
Fix available
7.8 High
-
gitoxidelabs gitoxide
gitoxide before 0.52.1 Path Traversal via Submodule Name
CVE-2026-82251
Fix available
8.7 High
-
gitoxidelabs gitoxide
gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules
CVE-2026-82252
Fix available
8.7 High
-
gitoxidelabs gitoxide
gitoxide before 0.69.0 Denial of Service via gix-pack
CVE-2026-82254
Fix available
8.7 High
-
gitoxide, gitoxide gix, gix-submodule +2 more
gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule
CVE-2026-40034
Fix available
7.3 High
-
gitoxidelabs gitoxide
gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass
CVE-2026-82253
Fix available
8.7 High
-
gitoxidelabs gitoxide
gitoxide 0.25.4 HTTP Credential Leak via Redirect
CVE-2026-82255
Fix available
7.6 High
-
gitoxidelabs gix-date, gitoxide, red hat logging subsystem for red hat openshift +3 more +5 more
Gix-date: gix-date: undefined behavior due to invalid string generation
CVE-2026-0810
Fix available
7.1 High
-
gitoxidelabs gitoxide
gitoxide does not detect SHA-1 collision attacks
CVE-2025-31130
Fix available
6.8 Medium
-
gitoxidelabs gitoxide
gix-worktree-state nonexclusive checkout sets executable files world-writable
CVE-2025-22620
Public exploitFix available
5.0 Medium
-
byron gitoxide
gix-path improperly resolves configuration path reported by Git
CVE-2024-45405
Fix available
6.0 Medium
-
byron gitoxide
gix-path uses local config across repos when it is the highest scope
CVE-2024-45305
Fix available
2.5 Low
-
byron gitoxide
gitoxide-core does not neutralize special characters for terminals
CVE-2024-43785
2.5 Low
-
byron gitoxide
gitoxide's gix-path can use a fake program files location
CVE-2024-40644
Fix available
6.8 Medium
-
byron gitoxide
gix refs and paths with reserved Windows device names access the devices
CVE-2024-35197
Fix available
5.4 Medium
-
byron gitoxide
gix traversal outside working tree enables arbitrary code execution
CVE-2024-35186
Fix available
8.8 High
-
byron gitoxide
gix-transport indirect code execution via malicious username
CVE-2024-32884
Fix available
6.4 Medium
-
gitoxidelabs gix-transport
gix-transport code execution vulnerability
CVE-2023-53158
Fix available
4.1 Medium