Skip to content
OpenAdvisories

Archive

25 July 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low —

    The kstring integration in gix-attributes is unsound

    `gix-attributes` (in [`state::ValueRef`](https://github.com/Byron/gitoxide/blob/gix-attributes-v0.22.2/gix-attributes/src/state.rs#L19-L27)) unsafely creates a `&str` from a `&[u8]` containing non-UTF8 data, with the justification that so long as nothing read…

  • Low 2.2

    In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restr…