GI
Product
gitoxide
16
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 7Low 1
Watch
Add gitoxide to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44471 | 7.8 | May 13 | gitoxide: Symlink prefix-reuse allows worktree escape during checkout Affected: < 0.21.1 |
| CVE-2026-82254 | 7.5 | Aug 28 | gitoxide before 0.69.0 Denial of Service via gix-pack Affected: before 0.69.0 |
| CVE-2026-82253 | 7.5 | Aug 28 | gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass Affected: before 0.82.0; before 0.11.1 |
| CVE-2026-82252 | 7.5 | Aug 28 | gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules Affected: before 0.52.1; before 0.82.0 |
| CVE-2026-82251 | 7.5 | Aug 28 | gitoxide before 0.52.1 Path Traversal via Submodule Name Affected: before 0.52.1; before 0.82.0 |
| CVE-2026-82247 | 7.5 | Aug 28 | gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing Affected: before 0.37.1; before 0.58.1 |
| CVE-2026-0810 | 7.1 | Jan 26 | Gix-date: gix-date: undefined behavior due to invalid string generation Affected: before 0.12.0 |
| CVE-2026-100419 | 7.0 | Sep 25 | gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink Affected: before 0.23.0 |
Showing 8