Skip to content
OpenAdvisories

Package · Debian

rust-gix-url

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-82247

    gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing

    gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat '?' or '#' as terminating the authority component, contrary to RFC 3986. As a consequence, gix-transport's HTTP redirect identity guard (can_reuse_identity…

    GitoxideLabs gitoxide rust-gix-transport rust-gix-transport Debian Ubuntu