RUSTSEC-2024-0348Published
gix traversal outside working tree enables arbitrary code execution
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2024-35186 · CVE overview and exploitation status
cve-program · CVE-2024-35186
euvd · EUVD-2024-1506
nvd · CVE-2024-35186
osv · GHSA-7w47-3wg8-547c
- https://github.com/Byron/gitoxide/security/advisories/GHSA-7w47-3wg8-547c
- https://nvd.nist.gov/vuln/detail/CVE-2024-35186
- https://github.com/Byron/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2024-0348.html
- https://rustsec.org/advisories/RUSTSEC-2024-0350.html
osv · RUSTSEC-2024-0348
- https://crates.io/crates/gix-index
- https://rustsec.org/advisories/RUSTSEC-2024-0348.html
- https://github.com/GitoxideLabs/gitoxide/commit/79dce79c62f6072aa2653780d590dc3993dfa401
- https://nvd.nist.gov/vuln/detail/CVE-2024-35186
osv · RUSTSEC-2024-0349
- https://crates.io/crates/gix-worktree
- https://rustsec.org/advisories/RUSTSEC-2024-0349.html
- https://github.com/GitoxideLabs/gitoxide/commit/79dce79c62f6072aa2653780d590dc3993dfa401
- https://nvd.nist.gov/vuln/detail/CVE-2024-35186
osv · RUSTSEC-2024-0350
Related changes
Linked by CVE identifier- Traversal outside working tree enables arbitrary code execution · Advisory content revised · 9 Nov 2026
- Traversal outside working tree enables arbitrary code execution · Advisory content revised · 9 Nov 2026
- Traversal outside working tree enables arbitrary code execution · Advisory content revised · 9 Nov 2026