gitoxide
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| gix traversal outside working tree enables arbitrary code execution | gitoxide-coregitoxide | Rust / Cargo | High | Fix reported | |
| gix refs and paths with reserved Windows device names access the devices | gitoxide-coregitoxide | Rust / Cargo | Medium | Fix reported | |
| gitoxide does not detect SHA-1 collision attacks | gitoxide-coregitoxide | Rust / Cargo | Medium | Fix reported | |
| gitoxide-core does not neutralize special characters for terminals | gitoxide-coregitoxide | Rust / Cargo | Low | No fix reported | |
| gix-transport indirect code execution via malicious username | gitoxidegix-transport | Rust / Cargo | Medium | Fix reported | |
| gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository | gitoxidegix | Rust / Cargo | High | Fix reported | |
| gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository | gitoxidegix | Rust / Cargo | High | Fix reported |