https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 11:10:56 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-91986 <p>gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and logs.</p> <p>gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and logs.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-91986 https://vulnerability.circl.lu/vuln/ghsa-7849-h6h3-vww8 <p>gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and logs.</p> <p>gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and logs.</p> https://vulnerability.circl.lu/vuln/ghsa-7849-h6h3-vww8 https://vulnerability.circl.lu/vuln/msrc_cve-2026-91986 msrc_CVE-2026-91986 https://vulnerability.circl.lu/vuln/msrc_cve-2026-91986 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11857-1 <p>gitoxide-0.58.0-2.1 on GA media</p> <p>gitoxide-0.58.0-2.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11857-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-91986 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-gix-transport, Ubuntu:26.04:LTS: rust-gix-transport</p> <p>gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and logs.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-gix-transport, Ubuntu:26.04:LTS: rust-gix-transport</p> <p>gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and logs.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-91986