crates.io/gix-path CVE-2024-40644: medium 6.8, EPSS 0.21%
gix-path can use a fake program files location
Action: Upgrade gix-path to 0.10.9 or later.
cargo update -p gix-path --precise 0.10.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.8 | 0.10.9 | - |
Fixed versions
| 0.10.9 |
Sources
- osv: RUSTSEC-2024-0355
- https://crates.io/crates/gix-path
- https://rustsec.org/advisories/RUSTSEC-2024-0355.html
- https://github.com/GitoxideLabs/gitoxide/commit/15235bf7968042da0493d431bbc955d6f9f54188
- https://github.com/advisories/GHSA-mgvv-9p9g-3jv4
CVE-2024-40644 · published · modified · JSON