{"action":"Upgrade gix-sec to 0.13.3 or later.","affected":[{"fixed":"0.13.3","introduced":"0"}],"component":"gix-sec","cve_ids":["CVE-2025-24890"],"ecosystem":"crates.io","epss":0.00165,"exploited":false,"fixed_versions":["0.13.3"],"ghsa_id":"GHSA-7rhf-42qf-vrvc","id":"tcs_01M5KEVC7TKTYBYW3CVSZBRN74","modified_at":"2026-09-09T17:06:56.644729Z","published_at":"2026-09-09T16:34:35Z","references":["https://osv.dev/vulnerability/GHSA-7rhf-42qf-vrvc","https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-7rhf-42qf-vrvc","https://github.com/GitoxideLabs/gitoxide/commit/39e37482d6f","https://github.com/GitoxideLabs/gitoxide"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-7rhf-42qf-vrvc","url":"https://osv.dev/vulnerability/GHSA-7rhf-42qf-vrvc"}],"summary":"gix-sec safe.directory protections absent for elevated administrators"}