crates.io/gix CVE-2024-32884: medium 6.4, EPSS 0.51%

gix-transport indirect code execution via malicious username

Action: Upgrade gix to 0.62 or later.

cargo update -p gix --precise 0.62

Affected

Fixed versions

Sources

• osv: GHSA-98p4-xjmm-8mfh#crates.io/gix
• https://github.com/Byron/gitoxide/security/advisories/GHSA-98p4-xjmm-8mfh
• https://nvd.nist.gov/vuln/detail/CVE-2024-32884
• https://github.com/Byron/gitoxide
• https://rustsec.org/advisories/RUSTSEC-2024-0335.html

CVE-2024-32884 · published 2024-04-15T19:33:03Z · modified 2026-09-10T03:50:11.213250638Z · JSON