Skip to content
OpenAdvisories

Product · GitoxideLabs

gitoxide

18 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2025-22620 Public exploit

    gix-worktree-state nonexclusive checkout sets executable files world-writable

    gitoxide is an implementation of git written in Rust. Prior to 0.17.0, gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask will restrict them appropriately. But one of the strategies it uses to set permis…