TI-2026-56718 CVE-2026-82253 · GHSA-6f8q-f8px-cxhw
gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass
Priority HIGH 77
gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal vulnerability.
Vulnerabilities
3 records
TI-2026-56717 CVE-2026-82252 · GHSA-wj8r-8wwg-mq4f
gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules
Priority HIGH 77
gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata.
TI-2026-56716 CVE-2026-82251 · GHSA-66gr-hvvc-vvxc
gitoxide before 0.52.1 Path Traversal via Submodule Name
Priority HIGH 77
gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories.