Skip to content
OpenAdvisories

Package · crates.io

gix-transport

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-82255

    gitoxide 0.25.4 HTTP Credential Leak via Redirect

    gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the o…

    GitoxideLabs gitoxide rust-gix-transport gix-transport Debian Ubuntu crates.io
  • Medium 4.1
    CVE-2023-53158

    gix-transport code execution vulnerability

    The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult …

    GitoxideLabs gix-transport rust rust-gix-transport Ubuntu Azure Linux crates.io
  • Medium 6.4
    CVE-2024-32884

    gix-transport indirect code execution via malicious username

    gitoxide is a pure Rust implementation of Git. `gix-transport` does not check the username part of a URL for text that the external `ssh` program would interpret as an option. A specially crafted clone URL can smuggle options to SSH. The possibilities are syn…

    Byron gitoxide rust cargo-audit Azure Linux Wolfi crates.io