GitoxideLabs · product
gitoxide
18 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.
- gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass
- gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe
- gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules
- gitoxide before 0.52.1 Path Traversal via Submodule Name
- gitoxide before 0.69.0 Denial of Service via gix-pack
- gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing
- gitoxide 0.25.4 HTTP Credential Leak via Redirect
- gix-worktree-state nonexclusive checkout sets executable files world-writable
- gitoxide before 0.33.0 Path Traversal via symlink following
- gitoxide: Symlink prefix-reuse allows worktree escape during checkout
- gitoxide before 0.38.2 Credential Helper Protocol Field Injection
- gitoxide does not detect SHA-1 collision attacks
- gitoxide gix-packetline before 0.21.5 Denial of Service
- gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection
- gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
- Gix-date: gix-date: undefined behavior due to invalid string generation
- gix-sec safe.directory protections absent for elevated administrators
- Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.