Skip to content
Threat Feed
Subscribe

Product

Gix-Url (<= 0.32.0)

1 brief RSS
high advisory

Credential Disclosure Vulnerability in gitoxide gix-url and gix-transport Crates

An improper URL parsing flaw in the gitoxide gix-url crate enables credential theft by causing the gix-transport identity guard to transmit HTTP Basic Authorization headers to unauthorized hosts via crafted redirects.

gix-url +1
1c