Skip to content

gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

High severity GitHub Reviewed Published Apr 25, 2026 in GitoxideLabs/gitoxide • Updated May 5, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts