Skip to content
OpenAdvisories

Package · Ubuntu

rust-gix-submodule

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    CVE-2026-40034

    gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule

    gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partia…

    gitoxide gix-submodule gitoxide gix Debian Ubuntu crates.io