[ Vendor · 5 CVEs ]
GitoxideLabs
CVEs affecting GitoxideLabs published in the last 30 days, plus any GitoxideLabs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109351 | 12 Oct 2026 | CVSS 6.5 | GitoxideLabs gix-packGitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abort the process by… | |
| CVE-2026-109348 | 12 Oct 2026 | CVSS 4.3 | GitoxideLabs gix-mailmapGitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in… | |
| CVE-2026-109349 | 12 Oct 2026 | CVSS 6.5 | GitoxideLabs gix-packgitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header decoder accepts version 3, but… | |
| CVE-2026-109350 | 12 Oct 2026 | CVSS 6.5 | GitoxideLabs gix-packGitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted… | |
| CVE-2026-100419 | 25 Sep 2026 | CVSS 7.0 | GitoxideLabs gitoxidegitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the… |