CVE-2024-43785

gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gitoxide-core, which provides most underlying functionality of the gix and ein commands, does not neutralize newlines, backspaces, or control characters—including those that form ANSI escape sequences—that appear in a...

CVE-2024-43785

CVE-2024-43785 involves gitoxide-core (and its gix/ein commands) not neutralizing special characters in terminal output. The root cause is that newlines, backspaces, and control characters—including ANSI escape sequences—are not sanitized in repository metadata (paths, author/committer names, com...

gitoxide (>=0.1.0 <=0.15.0) potentially affected by CVE-2024-43785 via gitoxide-core (>=0.10.5 <=0.9.0)

gitoxide-core CARGO version =0.10.5, =0.1.0, =0.15.0 Source cves: CVE-2024-43785 Source advisory: OSV:RUSTSEC-2024-0364...