Read the docs

gitoxide

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

gitoxide records in CISA KEV

No gitoxide vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-28877 CVE-2026-40034 · GHSA-f26g-jm89-4g65

gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule

Priority HIGH 67

gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodul…

CVSS 4.0HIGH 7.3 Local No auth User interaction EPSS 0.00651 Published 2026-05-26 Fixed in 0.5.21, 0.29.0 +2 CWE-77
Open these records in search →