VYPR

gix-validate

by Gitoxide

Source repositories

CVEs (1)

  • CVE-2026-82253HigAug 28, 2026
    risk 0.42cvss 7.5epss 0.01

    gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.find(b".."), allowing crafted names such as 'a..b/../../../.git/' to…