Vulnerability GHSA-j39j-6gw9-jw6h
Low Risk
LOW RISK
CVSS Score: 3.0
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
8 months ago
February 04, 2026 at 08:36 PM UTC
git2 has potential undefined behavior when dereferencing Buf struct
0.0.1 - 0.20.3
0.0.1 - 0.20.3
Summary
git2 has potential undefined behavior when dereferencing Buf struct
Details
If the Buf struct is dereferenced immediately after calling new() or default() on the Buf struct, a null pointer is passed to the unsafe function slice::from_raw_parts. According to the safety section documentation of the function, data must be non-null and aligned even for zero-length slices or slices of ZSTs. Thus, passing a null pointer will lead to undefined behavior.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 months ago
Potential undefined behavior with Signature from a buffer-created BlameHunk
0.0.1 - 0.20.4 RUSTSEC-2026-0184
0.0.1 - 0.20.4 RUSTSEC-2026-0184
Unknown
5 months ago
Potential undefined behavior when calling Remote::list()
0.0.1 - 0.20.4 RUSTSEC-2026-0183
0.0.1 - 0.20.4 RUSTSEC-2026-0183
Unknown
8 months ago
Potential undefined behavior when dereferencing Buf struct
0.0.1 - 0.20.3 RUSTSEC-2026-0008
0.0.1 - 0.20.3 RUSTSEC-2026-0008
Medium Risk
3 years ago
git2-rs fails to verify SSH keys by default
0.0.1 - 0.16.0 GHSA-m4ch-rfv5-x5g3
0.0.1 - 0.16.0 GHSA-m4ch-rfv5-x5g3
Impacted packages
Timeline
Published
8 months ago
February 04, 2026 at 08:36 PM UTC
Fixed (0.20.4)
8 months ago
February 02, 2026 at 02:57 PM UTC
Last Modified
1 month ago
September 10, 2026 at 03:50 AM UTC