GitoxideLabs vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 202620

Newest CVEs

• CVE-2026-123533

  Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File

  GitoxideLabs · gitoxide

  Medium6.8
• CVE-2026-123532

  gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe

  GitoxideLabs · gitoxide

  High7.1
• CVE-2026-109351

  Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count

  GitoxideLabs · gix-pack

  High7.1
• CVE-2026-109350

  Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance

  GitoxideLabs · gix-pack

  High7.1
• CVE-2026-109349

  gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header

  GitoxideLabs · gix-pack

  High7.1
• CVE-2026-109348

  Gitoxide gix-mailmap before 0.35.0 CPU Denial of Service via .mailmap Parsing

  GitoxideLabs · gix-mailmap

  Medium5.3
• CVE-2026-100419

  gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink

  GitoxideLabs · gitoxide

  High7.3
• CVE-2026-91986

  gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection

  GitoxideLabs · gitoxide

  Medium5.3
• CVE-2025-24890

  gix-sec safe.directory protections absent for elevated administrators

  GitoxideLabs · gitoxide

  Medium6.8
• CVE-2026-82255

  gitoxide 0.25.4 HTTP Credential Leak via Redirect

  GitoxideLabs · gitoxide

  High7.6