crates.io/gix-worktree-state CVE-2025-22620: medium 5, EPSS 0.37%

gix-worktree-state nonexclusive checkout sets executable files world-writable

Action: Upgrade gix-worktree-state to 0.17.0 or later.

cargo update -p gix-worktree-state --precise 0.17.0

Affected

Fixed versions

Sources

• osv: GHSA-fqmf-w4xh-33rh
• https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-fqmf-w4xh-33rh
• https://nvd.nist.gov/vuln/detail/CVE-2025-22620
• https://github.com/GitoxideLabs/gitoxide
• https://rustsec.org/advisories/RUSTSEC-2025-0001.html

CVE-2025-22620 · published 2025-01-21T21:13:06Z · modified 2026-09-10T03:50:56.333670088Z · JSON