What’s Vulnerable › Products

GitoxideLabs gitoxide vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your GitoxideLabs gitoxide version is affected

Latest GitoxideLabs gitoxide vulnerabilities

• CVE-2026-100419 — gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink (CVSS 7.0)
• CVE-2026-91986 — gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection (CVSS 5.4)
• CVE-2025-24890 — gix-sec safe.directory protections absent for elevated administrators (CVSS 6.8)
• CVE-2026-82255 — gitoxide 0.25.4 HTTP Credential Leak via Redirect (CVSS 6.8)
• CVE-2026-82254 — gitoxide before 0.69.0 Denial of Service via gix-pack (CVSS 7.5)
• CVE-2026-82253 — gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass (CVSS 7.5)
• CVE-2026-82252 — gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules (CVSS 7.5)
• CVE-2026-82251 — gitoxide before 0.52.1 Path Traversal via Submodule Name (CVSS 7.5)
• CVE-2026-82250 — gitoxide gix-packetline before 0.21.5 Denial of Service (CVSS 6.5)
• CVE-2026-82249 — gitoxide before 0.38.2 Credential Helper Protocol Field Injection (CVSS 3.1)
• CVE-2026-82248 — gitoxide before 0.33.0 Path Traversal via symlink following (CVSS 5.3)
• CVE-2026-82247 — gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing (CVSS 7.5)
• CVE-2025-31130 — gitoxide does not detect SHA-1 collision attacks (CVSS 6.8)
• CVE-2025-22620 — gix-worktree-state nonexclusive checkout sets executable files world-writable (CVSS 5.0)