GHSA-pmm9-4h7q-24c8

Facts

Severity

Medium · CVSS score 5.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected versions (gix-worktree-state)

<= 0.32.0As entered by the maintainer. Not reviewed.

Fixed in (gix-worktree-state)

>= 0.33.0

Affected versions (gix-worktree)

<= 0.54.0As entered by the maintainer. Not reviewed.

Fixed in (gix-worktree)

>= 0.55.0

Affected versions (gix)

<= 0.85.0As entered by the maintainer. Not reviewed.

Fixed in (gix)

>= 0.86.0

CVE

None cited by the advisory

GitHub Advisory Database

Not reviewed

OSV.dev

Not present

Other CVEs pointing here

CVE-2026-82248 (published by another CNA)

Timeline

1. 2026-08-02 08:30 UTC

   Published by the maintainers

   No CVE cited

2. 2026-10-28 07:19 UTC

   First seen by Limbowatch

   not reviewed · not in OSV

3. Waiting

   Reviewed by GitHub

4. Waiting

   In OSV; scanners can see it

Machine-readable record: feed/GHSA-pmm9-4h7q-24c8.json