| Release | Version |
|---|---|
| trixie | 0.44.0-1 |
| forky | 0.58.1-1 |
| sid | 0.59.2-1 |
| Bug | trixie | forky | sid | Description |
|---|---|---|---|---|
| CVE-2026-91986 | vulnerable (no DSA) | vulnerable | vulnerable | gitoxide gix-transport before 0.59.2 fails to filter control character ... |
| CVE-2026-82255 | vulnerable (no DSA) | fixed | fixed | gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerab ... |
| CVE-2026-82247 | vulnerable (no DSA) | fixed | fixed | gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-roll ... |
| Bug | Description |
|---|---|
| TEMP-0000000-70AB0A | gix-transport indirect code execution via malicious username |