Junglewise Threat Intelligence

CVE-2024-40644: RUSTSEC-2024-0355 - gix-path can use a fake program files location

CVE-2024-40644 · Severity: low · CVSS 3.1 · Published 2024-07-18

Technologies: gix-path (crates.io). Vendors: crates.io.

Executive brief

gix-path can use a fake program files location

Affected products

crates.io gix-path

Related threats

RUSTSEC-2024-0371 - gix-path improperly resolves configuration path reported by Git
RUSTSEC-2024-0367 - gix-path uses local config across repos when it is the highest scope