tocsin

CVE-2026-82255

1 advisory.

crates.io/gix-transport CVE-2026-82255: medium 6.8, EPSS 0.38%

gix-transport: HTTP credentials leaked to redirected host in curl backend

Action: Upgrade gix-transport to 0.56.0 or later.

cargo update -p gix-transport --precise 0.56.0

Affected

introducedfixedlast affected
0.25.40.56.0-

Fixed versions

0.56.0

Sources

CVE-2026-82255 · published · modified · JSON