Gitoxidelabs Gitoxide vulnerabilities

• gitoxidelabs gitoxide gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink CVE-2026-100419 Fix available 7.3 HighSeptember 25, 2026
• gitoxidelabs gitoxide gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection CVE-2026-91986 Fix available 5.3 MediumSeptember 15, 2026
• gitoxidelabs gitoxide gix-sec safe.directory protections absent for elevated administrators CVE-2025-24890 Fix available 6.8 MediumSeptember 9, 2026
• gitoxidelabs gitoxide gitoxide gix-packetline before 0.21.5 Denial of Service CVE-2026-82250 Fix available 7.1 HighAugust 28, 2026
• gitoxidelabs gitoxide gitoxide before 0.38.2 Credential Helper Protocol Field Injection CVE-2026-82249 Fix available 2.3 LowAugust 28, 2026
• gitoxidelabs gitoxide gitoxide before 0.33.0 Path Traversal via symlink following CVE-2026-82248 6.0 MediumAugust 28, 2026
• gitoxidelabs gitoxide gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing CVE-2026-82247 Fix available 8.7 HighAugust 28, 2026
• gitoxidelabs gitoxide, gix-fs +1 more gitoxide: Symlink prefix-reuse allows worktree escape during checkout CVE-2026-44471 Fix available 7.8 HighMay 7, 2026
• gitoxidelabs gitoxide gitoxide before 0.52.1 Path Traversal via Submodule Name CVE-2026-82251 Fix available 8.7 HighMay 5, 2026
• gitoxidelabs gitoxide gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules CVE-2026-82252 Fix available 8.7 HighMay 5, 2026
• gitoxidelabs gitoxide gitoxide before 0.69.0 Denial of Service via gix-pack CVE-2026-82254 Fix available 8.7 HighMay 5, 2026
• gitoxide, gitoxide gix, gix-submodule +2 more gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule CVE-2026-40034 Fix available 7.3 HighMay 5, 2026
• gitoxidelabs gitoxide gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass CVE-2026-82253 Fix available 8.7 HighMay 5, 2026
• gitoxidelabs gitoxide gitoxide 0.25.4 HTTP Credential Leak via Redirect CVE-2026-82255 Fix available 7.6 HighMay 5, 2026
• gitoxidelabs gix-date, gitoxide, red hat logging subsystem for red hat openshift +3 more +5 more Gix-date: gix-date: undefined behavior due to invalid string generation CVE-2026-0810 Fix available 7.1 HighDecember 29, 2025
• gitoxidelabs gitoxide gitoxide does not detect SHA-1 collision attacks CVE-2025-31130 Fix available 6.8 MediumApril 3, 2025
• gitoxidelabs gitoxide gix-worktree-state nonexclusive checkout sets executable files world-writable CVE-2025-22620 Public exploitFix available 5.0 MediumJanuary 18, 2025
• byron gitoxide gix-path improperly resolves configuration path reported by Git CVE-2024-45405 Fix available 6.0 MediumSeptember 6, 2024
• byron gitoxide gix-path uses local config across repos when it is the highest scope CVE-2024-45305 Fix available 2.5 LowAugust 31, 2024
• byron gitoxide gitoxide-core does not neutralize special characters for terminals CVE-2024-43785 2.5 LowAugust 22, 2024
• byron gitoxide gitoxide's gix-path can use a fake program files location CVE-2024-40644 Fix available 6.8 MediumJuly 18, 2024
• byron gitoxide gix refs and paths with reserved Windows device names access the devices CVE-2024-35197 Fix available 5.4 MediumMay 22, 2024
• byron gitoxide gix traversal outside working tree enables arbitrary code execution CVE-2024-35186 Fix available 8.8 HighMay 22, 2024
• byron gitoxide gix-transport indirect code execution via malicious username CVE-2024-32884 Fix available 6.4 MediumApril 13, 2024