Rust advisories / crate
Security history · gix · data from Oct 24, 2026
Is gix safe to use? Its security history
VerdictNo open advisories. 5 past vulnerabilities were fixed.
5advisories on record
5vulnerabilities
0unmaintained notices
nonenewest fixed version
Every advisory, newest first
- VulnerabilityGHSA-q54r-jf2p-rfr2 · 2026-10-23gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
- VulnerabilityGHSA-fr8x-3vfx-f45h · 2026-05-05gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository
- VulnerabilityGHSA-pg4w-g64p-qwhj · 2026-05-05gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository
- VulnerabilityGHSA-f26g-jm89-4g65 · 2026-05-05gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules
- VulnerabilityGHSA-p3hw-mv63-rf9w · 2026-05-05gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure
Check your version
Run cargo tree -i gix to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?