gitoxide versions prior to 0.52.1 and 0.83.0 have a vulnerability where the .gitmodules file in the worktree can be a symlink pointing outside the repository. This causes the submodule metadata API to parse and expose attacker-controlled data from outside the repository boundary. The flaw allows injection of arbitrary submodule configuration metadata, misleading downstream workflows that rely on this data. No direct code execution is claimed, but the integrity of submodule metadata is compromised.