crates.io/gix: high 7.3

gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()

Action: Upgrade gix to 0.90.0 or later.

cargo update -p gix --precise 0.90.0

Affected

Fixed versions

Sources

• osv: GHSA-q54r-jf2p-rfr2
• https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-q54r-jf2p-rfr2
• https://github.com/GitoxideLabs/gitoxide/pull/3068
• https://github.com/GitoxideLabs/gitoxide/commit/743957880154aa1726b30b8b5779fd10c78a058c
• https://github.com/GitoxideLabs/gitoxide
• https://github.com/GitoxideLabs/gitoxide/releases/tag/gix-v0.90.0

published 2026-10-23T20:52:28Z · modified 2026-10-23T21:00:06.833400057Z · JSON