VDB
GHSA-8rgq-m2pm-jvmg
GHSA-8rgq-m2pm-jvmg
REJECTED
CVSS 5.5 MEDIUM
Duplicate Advisory: gix-date can create non-utf8 string with `TimeBuf::as_str`
Risk Scores
CVSS v4.0
5.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| crates.io | gix-date | 0, 0 |
Timeline
- Jan 26, 2026 CVE Published
- Jan 27, 2026 CVE Updated
- Mar 2, 2026 Security Advisory
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-0810 advisory
- https://github.com/GitoxideLabs/gitoxide/issues/2305 url
- https://access.redhat.com/security/cve/CVE-2026-0810 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2427057 url
- https://crates.io/crates/gix-date url
- https://github.com/GitoxideLabs/gitoxide package
- https://rustsec.org/advisories/RUSTSEC-2025-0140.html url