Skip to content
OpenAdvisories

Vendor

gitoxide

1 known vulnerabilities.

Products

gitoxide 1 gix-submodule 1 gix 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-40034

    gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule

    gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partia…

    gitoxide gix-submodule gitoxide gix Debian Ubuntu crates.io