GitoxideLabs gitoxide vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 202614

Newest CVEs

• CVE-2026-100419

  gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink

  GitoxideLabs · gitoxide

  High7.3
• CVE-2026-91986

  gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection

  GitoxideLabs · gitoxide

  Medium5.3
• CVE-2025-24890

  gix-sec safe.directory protections absent for elevated administrators

  GitoxideLabs · gitoxide

  Medium6.8
• CVE-2026-82255

  gitoxide 0.25.4 HTTP Credential Leak via Redirect

  GitoxideLabs · gitoxide

  High7.6
• CVE-2026-82254

  gitoxide before 0.69.0 Denial of Service via gix-pack

  GitoxideLabs · gitoxide

  High8.7
• CVE-2026-82253

  gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass

  GitoxideLabs · gitoxide

  High8.7
• CVE-2026-82252

  gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules

  GitoxideLabs · gitoxide

  High8.7
• CVE-2026-82251

  gitoxide before 0.52.1 Path Traversal via Submodule Name

  GitoxideLabs · gitoxide

  High8.7
• CVE-2026-82250

  gitoxide gix-packetline before 0.21.5 Denial of Service

  GitoxideLabs · gitoxide

  High7.1
• CVE-2026-82249

  gitoxide before 0.38.2 Credential Helper Protocol Field Injection

  GitoxideLabs · gitoxide

  Low2.3