VYPR

gix-worktree-state

by Gitoxide

CVEs (1)

  • CVE-2026-82248MedAug 28, 2026
    risk 0.27cvss 5.3epss

    gix-worktree-state before 0.33.0 (part of gitoxide) allows writing files outside the worktree on Windows. gix_worktree_state::checkout() follows an existing terminal symlink during non-exclusive (incremental) materialization (destination_is_initially_empty: false) when…