Skip to content
OpenAdvisories

Package · Debian

rust-gix-transport

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-91986

    gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection

    gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or injec…

    GitoxideLabs gitoxide rust rust-gix-transport Debian Ubuntu Azure Linux
  • Medium 6.8
    CVE-2026-82255

    gitoxide 0.25.4 HTTP Credential Leak via Redirect

    gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the o…

    GitoxideLabs gitoxide rust-gix-transport gix-transport Debian Ubuntu crates.io