Skip to content
Threat Feed
Subscribe

Product

Gitoxide

2 briefs RSS
high advisory

Path Traversal Vulnerability in gitoxide

Gitoxide versions prior to 0.52.1 contain a path traversal vulnerability via symlink following that allows attackers to inject arbitrary file contents into submodule configuration metadata.

gitoxide +1
2t 1c
high advisory

gix and gitoxide Submodule Path Traversal Vulnerability

A path traversal vulnerability exists in gix and gitoxide where unvalidated submodule names from `.gitmodules` can be used to escape the `.git/modules` directory, potentially leading to repository confusion by redirecting submodule state inspection and open operations to attacker-controlled paths.

gix +1 path-traversal git repository-confusion supply-chain
2r 1t