Threats tagged 'ghsa-jjhr-hr59-47h4'

gitoxide gix-fs versions before 0.23.0 have a path validation bypass vulnerability in the worktree checkout mechanism. This flaw allows attackers to escape the intended worktree directory by manipulating symbolic links during forced checkouts with overwrite_existing enabled. Malicious repository trees can replace validated directories with symlink entries, causing files to be written outside the worktree, potentially enabling code execution or file manipulation.