gix has 2 CVEs on record. The median CVSS is 7.8 (high).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 7.8
Publish → KEV: —
Last 90 days: 0 prev 2

Products

gix 2

Follow gix:RSS feed Save a search →Embed badge ↗

2

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-40034High· 7.8gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules43
CVE-2026-82253Highgix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure41

gix vulnerabilities

CVEs affecting gix, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-82253High

gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure

▾ Twilightgix · gixEPSS 0.50%via OSV

CVE-2026-40034High· 7.8

gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules

gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules

▾ Twilightgix · gixEPSS 0.35%via OSV

gix vulnerabilities (CVEs) · VulnSea