CVE-2025-22620
2 advisories.
crates.io/gix-worktree-state CVE-2025-22620: medium 5, EPSS 0.37%
gix-worktree-state nonexclusive checkout sets executable files world-writable
Action: Upgrade gix-worktree-state to 0.17.0 or later.
cargo update -p gix-worktree-state --precise 0.17.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.0 | - |
Fixed versions
| 0.17.0 |
Sources
- osv: GHSA-fqmf-w4xh-33rh
- https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-fqmf-w4xh-33rh
- https://nvd.nist.gov/vuln/detail/CVE-2025-22620
- https://github.com/GitoxideLabs/gitoxide
- https://rustsec.org/advisories/RUSTSEC-2025-0001.html
CVE-2025-22620 · published · modified · JSON
crates.io/gix-worktree-state CVE-2025-22620: medium 5, EPSS 0.37%
gix-worktree-state nonexclusive checkout sets executable files world-writable
Action: Upgrade gix-worktree-state to 0.17.0 or later.
cargo update -p gix-worktree-state --precise 0.17.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.17.0 | - |
Fixed versions
| 0.17.0 |
Sources
- osv: RUSTSEC-2025-0001
- https://crates.io/crates/gix-worktree-state
- https://rustsec.org/advisories/RUSTSEC-2025-0001.html
- https://github.com/GitoxideLabs/gitoxide/pull/1764
- https://github.com/advisories/GHSA-fqmf-w4xh-33rh
- https://nvd.nist.gov/vuln/detail/CVE-2025-22620
CVE-2025-22620 · published · modified · JSON