gitoxide-core's gix and ein commands output repository metadata, including pathnames, author names, and commit messages, directly to terminals without neutralizing special characters such as ANSI escape sequences. This allows a malicious repository to produce misleading or manipulated terminal output, including colored text and cursor repositioning, which can conceal files or mimic error messages. The impact is mostly an annoyance and limited to Unix-like systems with ANSI-capable terminals. Windows systems are less affected due to filename and terminal limitations. The vulnerability does not affect other applications unless they use gitoxide-core, which is discouraged. No known exploits are reported, and the CVSS score is low.