crates.io/gix-path CVE-2024-45405: medium 6, EPSS 0.26%

gix-path improperly resolves configuration path reported by Git

Action: Upgrade gix-path to 0.10.11 or later.

cargo update -p gix-path --precise 0.10.11

Affected

Fixed versions

Sources

• osv: RUSTSEC-2024-0371
• https://crates.io/crates/gix-path
• https://rustsec.org/advisories/RUSTSEC-2024-0371.html
• https://github.com/Byron/gitoxide/commit/650a1b5cf25e086197cc55a68525a411e1c28031
• https://github.com/advisories/GHSA-m8rp-vv92-46c7

CVE-2024-45405 · published 2024-09-06T12:00:00Z · modified 2026-10-12T18:00:12.400489890Z · JSON