G
Vendor security profile
GitoxideLabs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs16
Critical0
CISA KEV0
Public exploit10
Patch rate%13
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
9
3
4
CVE KEV
CVE severity distribution
16toplam CVE
High11 (69%)
Medium4 (25%)
Low1 (6%)
Patch and exploitation view
%13
Verified patch
%0
CISA KEV
%63
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
7.1
CVE-2026-109351
Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count
G
Patch status unknown
7.1
CVE-2026-109350
Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance
G
Patch status unknown
7.1
CVE-2026-109349
gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header
G
Patch status unknown
5.3
CVE-2026-109348
Gitoxide gix-mailmap before 0.35.0 CPU Denial of Service via .mailmap Parsing
G
Patch status unknown
7.3
CVE-2026-100419
gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
G
Patch verifiedEPSS %0
5.3
CVE-2026-91986
gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection
G
Patch status unknownEPSS %0
6.8
CVE-2025-24890
gix-sec safe.directory protections absent for elevated administrators
G
Patch verifiedEPSS %0
7.6
CVE-2026-82255
gitoxide 0.25.4 HTTP Credential Leak via Redirect
G
Patch status unknownEPSS %0
8.7
CVE-2026-82254
gitoxide before 0.69.0 Denial of Service via gix-pack
G
Patch status unknownEPSS %0
8.7
CVE-2026-82253
gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass
G
Patch status unknownEPSS %1