Duplicate Advisory: gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execu

Severity: low · CVSS 3.1 · Published 2026-05-26

Technologies: gix (crates.io). Vendors: crates.io.

Executive brief

Duplicate Advisory: gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules

Affected products

crates.io gix

Related threats

gitoxide path traversal in submodule name validation
gitoxide symlink following in .gitmodules file
gitoxide path traversal in submodule name resolution
gitoxide gix-submodule command injection in gix_submodule::File::update
Gitoxide gix-submodule command injection via .gitmodules bypass