Skip to content
OpenAdvisories

Package · Debian

rust-gix-worktree

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2024-35186

    gix traversal outside working tree enables arbitrary code execution

    gitoxide is a pure Rust implementation of Git. During checkout, `gix-worktree-state` does not verify that paths point to locations in the working tree. A specially crafted repository can, when cloned, place new files anywhere writable by the application. This…

    Byron gitoxide gix gitoxide Debian Ubuntu crates.io