Vulnerability GHSA-j39j-6gw9-jw6h

Low Risk
LOW RISK
CVSS Score: 3.0
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
8 months ago
February 04, 2026 at 08:36 PM UTC
git2 has potential undefined behavior when dereferencing Buf struct
0.0.1 - 0.20.3
0.0.1 - 0.20.3

Summary

git2 has potential undefined behavior when dereferencing Buf struct

Details

If the Buf struct is dereferenced immediately after calling new() or default() on the Buf struct, a null pointer is passed to the unsafe function slice::from_raw_parts. According to the safety section documentation of the function, data must be non-null and aligned even for zero-length slices or slices of ZSTs. Thus, passing a null pointer will lead to undefined behavior.

Impacted packages

Timeline

Published
8 months ago
February 04, 2026 at 08:36 PM UTC
Fixed (0.20.4)
8 months ago
February 02, 2026 at 02:57 PM UTC
Last Modified
1 month ago
September 10, 2026 at 03:50 AM UTC