The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit.
| Reporter | Title | Published | Views | Family All 55 |
|---|---|---|---|---|
 | Azure Linux 3.0 Security Update: rust (CVE-2024-32884) | 10 Feb 202500:00 | – | nessus |
| CBL Mariner 2.0 Security Update: rust (CVE-2024-32884) | 19 Aug 202400:00 | – | nessus |
| Linux Distros Unpatched Vulnerability : CVE-2023-53158 | 18 Aug 202500:00 | – | nessus |
 | Rust Git Library Code Execution | 25 Jul 202400:00 | – | bdu_fstec |
 | CVE-2024-32884 affecting package rust for versions less than 1.75.0-9 | 14 Aug 202420:43 | – | cbl_mariner |
| CVE-2024-32884 affecting package rust for versions less than 1.72.0-8 | 18 Aug 202414:44 | – | cbl_mariner |
| CVE-2024-32884 affecting package rust for versions less than 1.75.0-9 | 14 Aug 202420:43 | – | cbl_mariner |
| CVE-2023-53158 affecting package rust for versions less than 1.72.0-8 | 7 Aug 202521:14 | – | cbl_mariner |
 | CVE-2024-32884 vulnerabilities | 21 Mar 202510:12 | – | cgr |
 | CVE-2024-32884 | 13 Apr 202413:04 | – | circl |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Feb 2026 12:23Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.14.1 - 6.4
EPSS0.00514
SSVC