GitoxideLabs vulnerabilities
We track 8 vulnerabilities in GitoxideLabs products across 3 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2026.
Latest GitoxideLabs vulnerabilities
- 7.0 High severity
gitoxide: Improper Link Resolution Before File Access
gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwrite_existing enabled, attackers
- 7.5 High severity
gitoxide: Uncaught Exception
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory pr
- 7.5 High severity
gitoxide: Improper Limitation of a Pathname to a Restricted Directory
gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.find(b".."), allowing crafted names such as 'a..b/
- 7.5 High severity
gitoxide: Improper Link Resolution Before File Access
gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadata. Attackers can create a malicious repository with a symlinked .gitmodules pointing outside the repo
- 7.5 High severity
gitoxide: Improper Limitation of a Pathname to a Restricted Directory
gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state() and open() funct
- 7.5 High severity
gitoxide: Insufficiently Protected Credentials
gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat '?' or '#' as terminating the authority component, contrary to RFC 3986. As a consequence, gix-transport's HTTP redirect identity guard (can_reuse_identity)
- 7.8 High severity
gitoxide: Improper Link Resolution Before File Access
gitoxide is an implementation of git written in Rust. Prior to 0.21.1, a malicious tree can be constructed that will, when checked out with gitoxide, permit writing an attacker-controlled symlink into any existing directory the user has write access to. During
- 7.1 High severity
gitoxide: Incorrect Calculation
A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these m