Executive brief
gitoxide-core does not neutralize special characters for terminals
Affected products
- crates.io gitoxide-core
- crates.io gitoxide
Junglewise Threat Intelligence
CVE-2024-43785: RUSTSEC-2024-0364 - gitoxide-core does not neutralize special characters for terminals
CVE-2024-43785 · Severity: low · CVSS 3.1 · Published 2024-08-22
Technologies: gitoxide-core (crates.io), gitoxide (crates.io). Vendors: crates.io.
Related threats
- gitoxide symlink following in .gitmodules file
- gitoxide path traversal in submodule name resolution
- RUSTSEC-2025-0021 - SHA-1 collision attacks are not detected
- RUSTSEC-2024-0352 - Refs and paths with reserved Windows device names access the devices
- RUSTSEC-2024-0350 - Traversal outside working tree enables arbitrary code execution