CVE-2024-43785

gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gitoxide-core, which provides most underlying functionality of the gix and ein commands, does not neutralize newlines, backspaces, or control characters—including those that form ANSI escape sequences—that appear in a repository's paths, author and committer names, commit messages, or other metadata. Such text may be written as part of the output of a command, as well as appearing in error messages when an operation fails. This sometimes allows an untrusted repository to misrepresent its contents and to alter or concoct error messages.

• CWE-150

• https://github.com/Byron/gitoxide/security/advisories/GHSA-88g2-r9rw-g55h

Published

Aug 22, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4378The Premium Addons for Elementor plugin for WordPress is vul…5.4
• CVE-2024-43780Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.0, …4.3
• CVE-2024-43781A vulnerability has been identified in SINUMERIK 828D V4 (Al…6.8
• CVE-2024-43782This openedx-translations repository contains translation fi…9.8
• CVE-2024-43783The Apollo Router Core is a configurable, high-performance g…7.5
• CVE-2024-43784lakeFS is an open-source tool that transforms object storage…5.7
• CVE-2024-43787Hono is a Web application framework that provides support fo…5
• CVE-2024-43788Webpack is a module bundler. Its main purpose is to bundle J…6.1
• CVE-2024-43789Discourse is an open source platform for community discussio…4.3
• CVE-2024-4379The Premium Addons for Elementor plugin for WordPress is vul…5.4
• CVE-2024-43790Vim is an open source command line text editor. When perform…5.5
• CVE-2024-43791RequestStore provides per-request global storage for Rack. T…7.8