https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:00:40.866365+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-0810 CVE-2026-0810 — Gix-date: gix-date: undefined behavior due to invalid string generation 2026-10-03T01:00:40.868105+00:00

Affected: GitoxideLabs gitoxide, Red Hat Logging Subsystem for Red Hat OpenShift, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.

 https://cve.radiocsirt.org/vuln/ghsa-6mw6-mj76-grwc GHSA-6mw6-mj76-grwc — gix-date can create non-utf8 string with `TimeBuf::as_str` 2026-10-03T01:00:40.868168+00:00

Affected: crates.io: gix-date

The function `gix_date::parse::TimeBuf::as_str` can create an illegal string containing non-utf8 characters. This violates the safety invariant of `TimeBuf` and can lead to undefined behavior when consuming the string.

The bug can be prevented by adding `str::from_utf8` to the function `TimeBuf::write`.