Gitoxidelabs Gix-Transport vulnerabilities

1 known vulnerability affecting gitoxidelabs/gix-transport.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-53158MEDIUMCVSS 4.1fixed in 0.36.12025-07-28

CVE-2023-53158 [MEDIUM] CWE-78 CVE-2023-53158: The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-o The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit.