Skip to content
OpenAdvisories

Package · Ubuntu

rust-gix-worktree

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    gitoxide before 0.33.0 Path Traversal via symlink following

    gix-worktree-state before 0.33.0 (part of gitoxide) allows writing files outside the worktree on Windows. gix_worktree_state::checkout() follows an existing terminal symlink during non-exclusive (incremental) materialization (destination_is_initially_empty: f…