GI
Product
gitoxide
16
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 7Low 1
Watch
Add gitoxide to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24890 | 6.8 | Sep 14 | gix-sec safe.directory protections absent for elevated administrators Affected: < 0.13.3 |
| CVE-2026-82255 | 6.8 | Aug 28 | gitoxide 0.25.4 HTTP Credential Leak via Redirect Affected: 0.25.4 through 0.55.0 |
| CVE-2025-31130 | 6.8 | Apr 4 | gitoxide does not detect SHA-1 collision attacks Affected: < 0.42.0 |
| CVE-2026-82250 | 6.5 | Aug 28 | gitoxide gix-packetline before 0.21.5 Denial of Service Affected: before 0.21.5 |
| CVE-2026-91986 | 5.4 | Sep 15 | gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection Affected: before 0.59.2 |
| CVE-2026-82248 | 5.3 | Aug 28 | gitoxide before 0.33.0 Path Traversal via symlink following Affected: before 0.33.0; before 0.55.0; before 0.49.0; before 0.86.0 |
| CVE-2025-22620 | 5.0 | Jan 20 | gix-worktree-state nonexclusive checkout sets executable files world-writable Affected: < 0.17.0 |
Showing 7