GHSA-q54r-jf2p-rfr2Published
gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
osv · GHSA-q54r-jf2p-rfr2
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-q54r-jf2p-rfr2
- https://github.com/GitoxideLabs/gitoxide/pull/3068
- https://github.com/GitoxideLabs/gitoxide/commit/743957880154aa1726b30b8b5779fd10c78a058c
- https://github.com/GitoxideLabs/gitoxide
- https://github.com/GitoxideLabs/gitoxide/releases/tag/gix-v0.90.0
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.