GitoxideLabs
- Total products in the ecosystem
- 4
- Total vulnerabilities (90 days)
- 16
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/05/2026, GitoxideLabs recorded 16 security vulnerabilities in the last 90 days across 3 products, including 11 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, gitoxide had the most security vulnerabilities in the GitoxideLabs ecosystem, with 12 vulnerabilities—approximately 75% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-123533Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph FileCVE-2026-123532gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC ProbeCVE-2026-109351Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object CountCVE-2026-109350Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base DistanceCVE-2026-109349gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-123533Gitoxide before 0.42.0 Denial of Service via Crafted Commit-Graph File | Exploitation statusNot confirmed | FixYes |
| Published11/08/2026 |
| SeverityMedium |
CVE-2026-123532gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe | Exploitation statusNot confirmed | FixYes | Affected productgitoxide | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-109351Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count | Exploitation statusActively exploited | FixYes | Affected productgix-pack | Published10/12/2026 | SeverityHigh |
|---|
CVE-2026-109350Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance | Exploitation statusActively exploited | FixYes | Affected productgix-pack | Published10/12/2026 | SeverityHigh |
|---|
CVE-2026-109349gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header | Exploitation statusNot exploited | FixYes | Affected productgix-pack | Published10/12/2026 | SeverityHigh |
|---|
CVE-2026-109348Gitoxide gix-mailmap before 0.35.0 CPU Denial of Service via .mailmap Parsing | Exploitation statusActively exploited | FixYes | Affected productgix-mailmap | Published10/12/2026 | SeverityMedium |
|---|
CVE-2026-100419gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published09/25/2026 | SeverityHigh |
|---|
CVE-2026-91986gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published09/15/2026 | SeverityMedium |
|---|
CVE-2025-24890gix-sec safe.directory protections absent for elevated administrators | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-82255gitoxide 0.25.4 HTTP Credential Leak via Redirect | Exploitation statusNot exploited | FixYes | Affected productgitoxide | Published08/28/2026 | SeverityHigh |
|---|
CVE-2026-82254gitoxide before 0.69.0 Denial of Service via gix-pack | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published08/28/2026 | SeverityHigh |
|---|
CVE-2026-82253gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published08/28/2026 | SeverityHigh |
|---|
CVE-2026-82252gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published08/28/2026 | SeverityHigh |
|---|
CVE-2026-82251gitoxide before 0.52.1 Path Traversal via Submodule Name | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published08/28/2026 | SeverityHigh |
|---|
CVE-2026-82250gitoxide gix-packetline before 0.21.5 Denial of Service | Exploitation statusNot exploited | FixYes | Affected productgitoxide | Published08/28/2026 | SeverityHigh |
|---|
CVE-2026-82249gitoxide before 0.38.2 Credential Helper Protocol Field Injection | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published08/28/2026 | SeverityLow |
|---|
CVE-2026-82248gitoxide before 0.33.0 Path Traversal via symlink following | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published08/28/2026 | SeverityMedium |
|---|
CVE-2026-82247gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published08/28/2026 | SeverityHigh |
|---|
CVE-2026-44471gitoxide: Symlink prefix-reuse allows worktree escape during checkout | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published05/13/2026 | SeverityHigh |
|---|
CVE-2026-0810Gix-date: gix-date: undefined behavior due to invalid string generation | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published01/26/2026 | SeverityHigh |
|---|
CVE-2023-53158CVE-2023-53158 | Exploitation statusActively exploited | FixYes | Affected productgix-transport | Published07/28/2025 | SeverityMedium |
|---|
CVE-2025-31130gitoxide does not detect SHA-1 collision attacks | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published04/04/2025 | SeverityMedium |
|---|
CVE-2025-22620gix-worktree-state nonexclusive checkout sets executable files world-writable | Exploitation statusActively exploited | FixYes | Affected productgitoxide | Published01/20/2025 | SeverityMedium |
|---|
21 Results | Page 1 of 1