Skip to content
OpenAdvisories

Package · crates.io

gix-path

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2024-45405

    gix-path improperly resolves configuration path reported by Git

    `gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their conversions. Prior to version 0.10.11, `gix-path` runs `git` to find the path of a configuration file associated with the `git` installation, …

    Byron gitoxide cargo-audit cargo-c Debian Ubuntu Wolfi crates.io
  • Medium 6.8
    CVE-2024-40644

    gitoxide's gix-path can use a fake program files location

    gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. `gix-path` can be tricked into running another `git.exe` placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts without admi…

    Byron gitoxide gix-path crates.io