gitoxide
A command-line application for interacting with git repositories
Security Advisories for gitoxide in cargo
High
26 days ago
gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository
cargo
gix, gitoxide
High
26 days ago
gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository
cargo
gix, gitoxide
Moderate
about 1 year ago
gitoxide does not detect SHA-1 collision attacks
cargo
gix-worktree-state, gix-worktree, gix-traverse, gix-status, gix-revwalk, gix-revision, gix-ref, gix-protocol, gix-negotiate, gix-merge, gix-fsck, gix-filter, gix-discover, gix-dir, gix-diff, gix-config, gix-blame, gix-archive, gix, gitoxide-core, gitoxide, gix-pack, gix-odb, gix-object, gix-index, gix-commitgraph, gix-features
Potential
Moderate
over 1 year ago
gix-worktree-state nonexclusive checkout sets executable files world-writable
cargo
gix-worktree-state
Low
almost 2 years ago
gitoxide-core does not neutralize special characters for terminals
cargo
gitoxide, gitoxide-core
Moderate
about 2 years ago
gix refs and paths with reserved Windows device names access the devices
cargo
gix-index, gix-ref, gix, gitoxide-core, gix-worktree, gitoxide, gix-worktree-state
High
about 2 years ago
gix traversal outside working tree enables arbitrary code execution
cargo
gix-index, gitoxide-core, gix, gix-worktree, gix-fs, gitoxide, gix-worktree-state
Moderate
about 2 years ago
gix-transport indirect code execution via malicious username
cargo
gitoxide, gix, gix-transport
Potential