GI
Product
gitoxide
14
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 5Low 1
Watch
Add gitoxide to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44471 | 7.8 | May 13 | gitoxide: Symlink prefix-reuse allows worktree escape during checkout Affected: < 0.21.1 |
| CVE-2026-82254 | 7.5 | Aug 28 | gitoxide before 0.69.0 Denial of Service via gix-pack Affected: before 0.69.0 |
| CVE-2026-82253 | 7.5 | Aug 28 | gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass Affected: before 0.82.0; before 0.11.1 |
| CVE-2026-82252 | 7.5 | Aug 28 | gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules Affected: before 0.52.1; before 0.82.0 |
| CVE-2026-82251 | 7.5 | Aug 28 | gitoxide before 0.52.1 Path Traversal via Submodule Name Affected: before 0.52.1; before 0.82.0 |
| CVE-2026-82247 | 7.5 | Aug 28 | gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing Affected: before 0.37.1; before 0.58.1 |
| CVE-2026-0810 | 7.1 | Jan 26 | Gix-date: gix-date: undefined behavior due to invalid string generation Affected: before 0.12.0 |
| CVE-2026-100419 | 7.0 | Sep 25 | gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink Affected: before 0.23.0 |
| CVE-2025-24890 | 6.8 | Sep 14 | gix-sec safe.directory protections absent for elevated administrators Affected: < 0.13.3 |
| CVE-2026-82255 | 6.8 | Aug 28 | gitoxide 0.25.4 HTTP Credential Leak via Redirect Affected: 0.25.4 through 0.55.0 |
| CVE-2026-82250 | 6.5 | Aug 28 | gitoxide gix-packetline before 0.21.5 Denial of Service Affected: before 0.21.5 |
| CVE-2026-91986 | 5.4 | Sep 15 | gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection Affected: before 0.59.2 |
| CVE-2026-82248 | 5.3 | Aug 28 | gitoxide before 0.33.0 Path Traversal via symlink following Affected: before 0.33.0; before 0.55.0; before 0.49.0; before 0.86.0 |
| CVE-2026-82249 | 3.1 | Aug 28 | gitoxide before 0.38.2 Credential Helper Protocol Field Injection Affected: before 0.38.2 |
Showing 14