byron/gitoxide Security Advisories | GitStock

medium2024-09-06

gix-path improperly resolves configuration path reported by Git

GHSA-m8rp-vv92-46c7 · CVE-2024-45405

low2024-09-03

gix-path uses local config across repos when it is the highest scope

GHSA-v26r-4c9c-h3j6 · CVE-2024-45305

low2024-08-22

gitoxide-core does not neutralize special characters for terminals

GHSA-88g2-r9rw-g55h · CVE-2024-43785

low2024-07-25

The kstring integration in gix-attributes is unsound

GHSA-cx7h-h87r-jpgr

high2024-07-18

gix-path can use a fake program files location

GHSA-mgvv-9p9g-3jv4 · CVE-2024-40644

medium2024-05-22

gix refs and paths with reserved Windows device names access the devices

GHSA-49jc-r788-3fc9 · CVE-2024-35197

high2024-05-22

gix traversal outside working tree enables arbitrary code execution

GHSA-7w47-3wg8-547c · CVE-2024-35186

medium2024-04-15

gix-transport indirect code execution via malicious username

GHSA-98p4-xjmm-8mfh · CVE-2024-32884