Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:37:42 +0000 CVE-2023-53158 https://cve.radiocsirt.org/vuln/cve-2023-53158 <p><strong>Affected:</strong> GitoxideLabs gix-transport</p> <p>The gix-transport crate before 0.36.1 for Rust allows command execution via the &#34;gix clone &#39;ssh://-oProxyCommand=open$IFS&#34; substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit.</p> <p><strong>Affected:</strong> GitoxideLabs gix-transport</p> <p>The gix-transport crate before 0.36.1 for Rust allows command execution via the &#34;gix clone &#39;ssh://-oProxyCommand=open$IFS&#34; substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit.</p> https://cve.radiocsirt.org/vuln/cve-2023-53158 GHSA-rrjw-j4m2-mf34 — gix-transport code execution vulnerability https://cve.radiocsirt.org/vuln/ghsa-rrjw-j4m2-mf34 <p><strong>Affected:</strong> crates.io: gix-transport</p> <p>The `gix-transport` crate prior to the patched version 0.36.1 would allow attackers to use malicious ssh clone URLs to pass arbitrary arguments to the `ssh` program, leading to arbitrary code execution.</p> <p>PoC: `gix clone &#39;ssh://-oProxyCommand=open$IFS-aCalculator/foo&#39;`</p> <p>This will launch a calculator on OSX.</p> <p>See https://secure.phabricator.com/T12961 for more details on similar vulnerabilities in `git`.</p> <p>Thanks for [vin01](https://github.com/vin01) for disclosing this issue.</p> <p><strong>Affected:</strong> crates.io: gix-transport</p> <p>The `gix-transport` crate prior to the patched version 0.36.1 would allow attackers to use malicious ssh clone URLs to pass arbitrary arguments to the `ssh` program, leading to arbitrary code execution.</p> <p>PoC: `gix clone &#39;ssh://-oProxyCommand=open$IFS-aCalculator/foo&#39;`</p> <p>This will launch a calculator on OSX.</p> <p>See https://secure.phabricator.com/T12961 for more details on similar vulnerabilities in `git`.</p> <p>Thanks for [vin01](https://github.com/vin01) for disclosing this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-rrjw-j4m2-mf34