CNNVD-202601-4334 Information

CNNVD ID

CNNVD-202601-4334

CVE-2026-0810

  • CNNVD Published: 2026-01-26

Description (Chinese)

gitoxide是Sebastian Thiel个人开发者的一个用 Rust 编写的 git 实现。 gix-date存在安全漏洞,该漏洞源于as_str函数可能生成无效非UTF-8字符串,可能导致应用程序不稳定。

Description (English)

The gitoxide is a git by Sebastian Thiel’s personal developer. gix-date has a security loophole, which stems from the possibility that the as str function may create an invalid non-UTF-8 string, which may cause the application to be unstable.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2026-01-26

Last Modified

2026-02-24

References

https://access.redhat.com/security/cve/CVE-2026-0810 https://bugzilla.redhat.com/show_bug.cgi?id=2427057 https://crates.io/crates/gix-date https://github.com/GitoxideLabs/gitoxide/issues/2305 https://rustsec.org/advisories/RUSTSEC-2025-0140.html

Share on: