3 matches found
CVE-2026-82253: Improper Limitation of a Pathname to a Restricted Directory
gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...
8.7CVSS6.1AI score0.00657EPSS
SaveExploits0References2
20