{"action":"Upgrade gix-attributes to 0.22.3 or later.","affected":[{"fixed":"0.22.3","introduced":"0"}],"component":"gix-attributes","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.22.3"],"ghsa_id":"GHSA-cx7h-h87r-jpgr","id":"tcs_01M5KEX2A0WNF40C210F3ER07K","modified_at":"2026-09-10T03:50:16.580555746Z","published_at":"2024-07-25T16:38:42Z","references":["https://osv.dev/vulnerability/GHSA-cx7h-h87r-jpgr","https://github.com/Byron/gitoxide/issues/1460","https://github.com/GitoxideLabs/gitoxide/issues/1460","https://github.com/rustsec/advisory-db/commit/884aaa1646132bc3a27ba058197d6ef039bec294","https://github.com/Byron/gitoxide","https://rustsec.org/advisories/RUSTSEC-2024-0359.html"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-cx7h-h87r-jpgr","url":"https://osv.dev/vulnerability/GHSA-cx7h-h87r-jpgr"}],"summary":"The kstring integration in gix-attributes is unsound"}