CVE-2026-0810

HIGH 7.1

Gix-date: gix-date: undefined behavior due to invalid string generation

CVSS Score

7.1

EPSS Score

0.0%

EPSS Percentile

0th

A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.

CWE	CWE-135
Vendor	gitoxidelabs
Product	gitoxide
Published	Jan 26, 2026
Last Updated	Apr 9, 2026

Stay Ahead of the Next One

Get instant alerts for gitoxidelabs gitoxide

Be the first to know when new high vulnerabilities affecting gitoxidelabs gitoxide are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High