Skip to content
OpenAdvisories

Package · Debian

rust-gix-validate

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-82253

    gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass

    gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.find(b".."), allowing crafted names such as 'a..b…

    GitoxideLabs gitoxide rust-gix gix Debian Ubuntu crates.io