TI-2024-23260 CVE-2024-35186 · GHSA-7w47-3wg8-547c
gix traversal outside working tree enables arbitrary code execution
Priority HIGH 73
gitoxide is a pure Rust implementation of Git.
Byron
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Byron records in CISA KEVNo Byron vulnerabilities are listed in CISA KEV.
Records
8 records
TI-2024-27055 CVE-2024-40644 · GHSA-mgvv-9p9g-3jv4
gitoxide's gix-path can use a fake program files location
Priority HIGH 65
gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git.
TI-2024-21756 CVE-2024-32884 · GHSA-98p4-xjmm-8mfh
gix-transport indirect code execution via malicious username
Priority MEDIUM 64
gitoxide is a pure Rust implementation of Git.
TI-2024-30454 CVE-2024-45405 · GHSA-m8rp-vv92-46c7
gix-path improperly resolves configuration path reported by Git
Priority MEDIUM 62
`gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their conversions.
TI-2024-23269 CVE-2024-35197 · GHSA-49jc-r788-3fc9
gix refs and paths with reserved Windows device names access the devices
Priority MEDIUM 58
gitoxide is a pure Rust implementation of Git.
TI-2024-30376 CVE-2024-45305 · GHSA-v26r-4c9c-h3j6
gix-path uses local config across repos when it is the highest scope
Priority MEDIUM 46
gix-path is a crate of the gitoxide project dealing with git paths and their conversions.
TI-2024-29380 CVE-2024-43785 · GHSA-88g2-r9rw-g55h
gitoxide-core does not neutralize special characters for terminals
Priority MEDIUM 46
gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git.
TI-2026-51591 CVE-2026-73479 · GHSA-2m2p-wc26-4j7x
dua-cli Terminal Escape Sequence Injection via Marked Paths
Priority LOW 21
dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface.