CVE-2025-22620

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-22620
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-22620.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-22620
Aliases
Downstream
Related
Published
2025-01-20T15:38:32Z
Modified
2025-10-20T20:30:15.995963Z
Severity
  • 5.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
Summary
gix-worktree-state nonexclusive checkout sets executable files world-writable
Details

gitoxide is an implementation of git written in Rust. Prior to 0.17.0, gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask will restrict them appropriately. But one of the strategies it uses to set permissions is not subject to the umask. This causes files in a repository to be world-writable in some situations. This vulnerability is fixed in 0.17.0.

Database specific 
{
    "cwe_ids": [
        "CWE-281",
        "CWE-687"
    ]
}
References

Affected packages

Git / github.com/gitoxidelabs/gitoxide

Affected ranges

Type
GIT
Repo
https://github.com/gitoxidelabs/gitoxide
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d071583c5576fdf5f7717765ffed5681792aa81f

Affected versions

cargo-smart-release-v0.*

cargo-smart-release-v0.1.0
cargo-smart-release-v0.10.0
cargo-smart-release-v0.10.1
cargo-smart-release-v0.10.2
cargo-smart-release-v0.11.0
cargo-smart-release-v0.12.0
cargo-smart-release-v0.12.1
cargo-smart-release-v0.13.0
cargo-smart-release-v0.2.0
cargo-smart-release-v0.2.1
cargo-smart-release-v0.2.2
cargo-smart-release-v0.2.3
cargo-smart-release-v0.2.4
cargo-smart-release-v0.3.0
cargo-smart-release-v0.3.1
cargo-smart-release-v0.4.0
cargo-smart-release-v0.5.0
cargo-smart-release-v0.5.1
cargo-smart-release-v0.5.2
cargo-smart-release-v0.5.3
cargo-smart-release-v0.5.4
cargo-smart-release-v0.5.5
cargo-smart-release-v0.5.6
cargo-smart-release-v0.6.0
cargo-smart-release-v0.7.0
cargo-smart-release-v0.8.0
cargo-smart-release-v0.9.0

Other

end-2020
the-beginning-2020

git-actor-v0.*

git-actor-v0.1.0
git-actor-v0.1.1
git-actor-v0.10.0
git-actor-v0.10.1
git-actor-v0.11.0
git-actor-v0.11.1
git-actor-v0.11.2
git-actor-v0.11.3
git-actor-v0.11.4
git-actor-v0.12.0
git-actor-v0.13.0
git-actor-v0.2.0
git-actor-v0.3.0
git-actor-v0.3.1
git-actor-v0.3.2
git-actor-v0.3.3
git-actor-v0.4.0
git-actor-v0.5.0
git-actor-v0.5.1
git-actor-v0.5.2
git-actor-v0.5.3
git-actor-v0.6.0
git-actor-v0.7.0
git-actor-v0.8.0
git-actor-v0.8.1
git-actor-v0.9.0

git-attributes-v0.*

git-attributes-v0.0.0
git-attributes-v0.1.0
git-attributes-v0.2.0
git-attributes-v0.3.0
git-attributes-v0.3.1
git-attributes-v0.3.2
git-attributes-v0.3.3
git-attributes-v0.4.0
git-attributes-v0.5.0

git-bitmap-v0.*

git-bitmap-v0.0.0
git-bitmap-v0.0.1
git-bitmap-v0.1.0
git-bitmap-v0.1.1
git-bitmap-v0.1.2

git-chunk-v0.*

git-chunk-v0.1.0
git-chunk-v0.2.0
git-chunk-v0.3.0
git-chunk-v0.3.1
git-chunk-v0.3.2

git-command-v0.*

git-command-v0.0.0
git-command-v0.1.0

git-commitgraph-v0.*

git-commitgraph-v0.0.0
git-commitgraph-v0.1.0
git-commitgraph-v0.1.1
git-commitgraph-v0.1.2
git-commitgraph-v0.2.0
git-commitgraph-v0.3.0
git-commitgraph-v0.3.1
git-commitgraph-v0.3.2
git-commitgraph-v0.4.0
git-commitgraph-v0.4.1
git-commitgraph-v0.4.2
git-commitgraph-v0.4.3
git-commitgraph-v0.4.4
git-commitgraph-v0.5.0
git-commitgraph-v0.6.0
git-commitgraph-v0.7.0
git-commitgraph-v0.8.0
git-commitgraph-v0.8.1
git-commitgraph-v0.8.2
git-commitgraph-v0.9.0

git-config-v0.*

git-config-v0.0.0
git-config-v0.1.0
git-config-v0.1.1
git-config-v0.1.10
git-config-v0.1.11
git-config-v0.1.2
git-config-v0.1.3
git-config-v0.1.4
git-config-v0.1.5
git-config-v0.1.6
git-config-v0.1.7
git-config-v0.1.8
git-config-v0.1.9
git-config-v0.2.0
git-config-v0.2.1
git-config-v0.3.0
git-config-v0.4.0
git-config-v0.5.0
git-config-v0.6.0
git-config-v0.6.1
git-config-v0.7.0
git-config-v0.7.1
git-config-v0.8.0
git-config-v0.9.0

git-config-value-v0.*

git-config-value-v0.7.0
git-config-value-v0.8.0

git-credentials-v0.*

git-credentials-v0.0.0
git-credentials-v0.1.0
git-credentials-v0.2.0
git-credentials-v0.3.0
git-credentials-v0.4.0
git-credentials-v0.5.0
git-credentials-v0.6.0

git-date-v0.*

git-date-v0.0.0
git-date-v0.0.1
git-date-v0.0.2
git-date-v0.0.3
git-date-v0.0.4
git-date-v0.0.5
git-date-v0.1.0
git-date-v0.2.0

git-diff-v0.*

git-diff-v0.0.0
git-diff-v0.1.0
git-diff-v0.10.0
git-diff-v0.11.0
git-diff-v0.11.1
git-diff-v0.12.0
git-diff-v0.13.0
git-diff-v0.14.0
git-diff-v0.15.0
git-diff-v0.16.0
git-diff-v0.17.0
git-diff-v0.17.1
git-diff-v0.17.2
git-diff-v0.18.0
git-diff-v0.18.1
git-diff-v0.19.0
git-diff-v0.2.0
git-diff-v0.20.0
git-diff-v0.3.0
git-diff-v0.4.0
git-diff-v0.4.1
git-diff-v0.5.0
git-diff-v0.6.0
git-diff-v0.8.0
git-diff-v0.8.1
git-diff-v0.8.2
git-diff-v0.9.0
git-diff-v0.9.1
git-diff-v0.9.2

git-discover-v0.*

git-discover-v0.0.0
git-discover-v0.1.0
git-discover-v0.1.1
git-discover-v0.1.2
git-discover-v0.1.3
git-discover-v0.2.0
git-discover-v0.3.0
git-discover-v0.4.0
git-discover-v0.4.1
git-discover-v0.4.2
git-discover-v0.5.0
git-discover-v0.6.0

git-features-v0.*

git-features-v0.1.0
git-features-v0.10.0
git-features-v0.10.1
git-features-v0.11.0
git-features-v0.12.0
git-features-v0.13.0
git-features-v0.14.0
git-features-v0.16.0
git-features-v0.16.1
git-features-v0.16.2
git-features-v0.16.3
git-features-v0.16.4
git-features-v0.16.5
git-features-v0.17.0
git-features-v0.18.0
git-features-v0.19.0
git-features-v0.19.1
git-features-v0.2.0
git-features-v0.20.0
git-features-v0.21.0
git-features-v0.21.1
git-features-v0.22.0
git-features-v0.22.1
git-features-v0.22.2
git-features-v0.22.3
git-features-v0.22.4
git-features-v0.22.5
git-features-v0.22.6
git-features-v0.23.0
git-features-v0.3.0
git-features-v0.4.0
git-features-v0.5.0
git-features-v0.6.0
git-features-v0.7.0
git-features-v0.8.0
git-features-v0.9.0

git-fetchhead-v0.*

git-fetchhead-v0.0.0

git-filter-v0.*

git-filter-v0.0.0

git-glob-v0.*

git-glob-v0.1.0
git-glob-v0.2.0
git-glob-v0.3.0
git-glob-v0.3.1
git-glob-v0.3.2
git-glob-v0.4.0

git-hash-v0.*

git-hash-v0.1.0
git-hash-v0.1.1
git-hash-v0.1.2
git-hash-v0.2.0
git-hash-v0.3.0
git-hash-v0.5.0
git-hash-v0.5.1
git-hash-v0.6.0
git-hash-v0.7.0
git-hash-v0.8.0
git-hash-v0.9.0
git-hash-v0.9.1
git-hash-v0.9.10
git-hash-v0.9.11
git-hash-v0.9.2
git-hash-v0.9.3
git-hash-v0.9.4
git-hash-v0.9.5
git-hash-v0.9.6
git-hash-v0.9.7
git-hash-v0.9.8
git-hash-v0.9.9

git-index-v0.*

git-index-v0.0.0
git-index-v0.1.0
git-index-v0.2.0
git-index-v0.3.0
git-index-v0.4.0
git-index-v0.4.1
git-index-v0.4.2
git-index-v0.4.3
git-index-v0.5.0
git-index-v0.6.0

git-lfs-v0.*

git-lfs-v0.0.0

git-lock-v0.*

git-lock-v0.0.0
git-lock-v0.1.0
git-lock-v0.2.0
git-lock-v0.3.0
git-lock-v0.3.1
git-lock-v0.3.2

git-lock-v1.*

git-lock-v1.0.0
git-lock-v1.0.1

git-lock-v2.*

git-lock-v2.0.0
git-lock-v2.1.0
git-lock-v2.1.1

git-mailmap-v0.*

git-mailmap-v0.0.0
git-mailmap-v0.1.0
git-mailmap-v0.2.0
git-mailmap-v0.3.0
git-mailmap-v0.3.1
git-mailmap-v0.3.2
git-mailmap-v0.4.0
git-mailmap-v0.5.0

git-note-v0.*

git-note-v0.0.0

git-object-v0.*

git-object-v0.1.0
git-object-v0.10.0
git-object-v0.11.0
git-object-v0.12.0
git-object-v0.12.1
git-object-v0.12.2
git-object-v0.13.0
git-object-v0.13.1
git-object-v0.14.0
git-object-v0.14.1
git-object-v0.15.0
git-object-v0.15.1
git-object-v0.16.0
git-object-v0.17.0
git-object-v0.17.1
git-object-v0.18.0
git-object-v0.19.0
git-object-v0.20.0
git-object-v0.20.1
git-object-v0.20.2
git-object-v0.20.3
git-object-v0.21.0
git-object-v0.22.0
git-object-v0.3.0
git-object-v0.4.0
git-object-v0.5.0
git-object-v0.6.0
git-object-v0.7.0
git-object-v0.8.0
git-object-v0.9.0

git-odb-v0.*

git-odb-v0.1.0
git-odb-v0.10.0
git-odb-v0.12.0
git-odb-v0.14.0
git-odb-v0.15.0
git-odb-v0.16.0
git-odb-v0.16.1
git-odb-v0.17.0
git-odb-v0.18.0
git-odb-v0.20.0
git-odb-v0.20.1
git-odb-v0.20.2
git-odb-v0.21.0
git-odb-v0.21.1
git-odb-v0.21.2
git-odb-v0.21.3
git-odb-v0.22.0
git-odb-v0.23.0
git-odb-v0.24.0
git-odb-v0.25.0
git-odb-v0.26.0
git-odb-v0.27.0
git-odb-v0.28.0
git-odb-v0.29.0
git-odb-v0.3.0
git-odb-v0.30.0
git-odb-v0.31.0
git-odb-v0.31.1
git-odb-v0.31.2
git-odb-v0.32.0
git-odb-v0.33.0
git-odb-v0.34.0
git-odb-v0.4.0
git-odb-v0.4.1
git-odb-v0.4.2
git-odb-v0.5.0
git-odb-v0.6.0
git-odb-v0.7.0
git-odb-v0.7.1
git-odb-v0.8.0
git-odb-v0.9.0
git-odb-v0.9.1

git-pack-v0.*

git-pack-v0.1.0
git-pack-v0.10.0
git-pack-v0.11.0
git-pack-v0.12.0
git-pack-v0.13.0
git-pack-v0.14.0
git-pack-v0.15.0
git-pack-v0.16.0
git-pack-v0.16.1
git-pack-v0.17.0
git-pack-v0.18.0
git-pack-v0.19.0
git-pack-v0.19.1
git-pack-v0.2.0
git-pack-v0.20.0
git-pack-v0.21.0
git-pack-v0.21.1
git-pack-v0.21.2
git-pack-v0.22.0
git-pack-v0.23.0
git-pack-v0.24.0
git-pack-v0.3.0
git-pack-v0.3.1
git-pack-v0.5.0
git-pack-v0.6.0
git-pack-v0.8.0
git-pack-v0.8.1
git-pack-v0.8.2
git-pack-v0.9.0

git-packetline-v0.*

git-packetline-v0.1.0
git-packetline-v0.10.0
git-packetline-v0.10.1
git-packetline-v0.11.0
git-packetline-v0.12.0
git-packetline-v0.12.1
git-packetline-v0.12.2
git-packetline-v0.12.3
git-packetline-v0.12.4
git-packetline-v0.12.5
git-packetline-v0.12.6
git-packetline-v0.12.7
git-packetline-v0.13.0
git-packetline-v0.13.1
git-packetline-v0.2.0
git-packetline-v0.2.1
git-packetline-v0.3.0
git-packetline-v0.4.0
git-packetline-v0.4.1
git-packetline-v0.5.0
git-packetline-v0.6.0
git-packetline-v0.7.0
git-packetline-v0.8.0
git-packetline-v0.9.0
git-packetline-v0.9.1

git-path-v0.*

git-path-v0.1.0
git-path-v0.1.1
git-path-v0.1.2
git-path-v0.1.3
git-path-v0.2.0
git-path-v0.3.0
git-path-v0.4.0
git-path-v0.4.1
git-path-v0.4.2
git-path-v0.5.0

git-pathspec-v0.*

git-pathspec-v0.0.0

git-prompt-v0.*

git-prompt-v0.0.0
git-prompt-v0.1.0

git-protocol-v0.*

git-protocol-v0.0.0
git-protocol-v0.1.0
git-protocol-v0.1.1
git-protocol-v0.10.0
git-protocol-v0.10.1
git-protocol-v0.10.2
git-protocol-v0.10.3
git-protocol-v0.10.4
git-protocol-v0.11.0
git-protocol-v0.12.0
git-protocol-v0.12.1
git-protocol-v0.13.0
git-protocol-v0.14.0
git-protocol-v0.15.0
git-protocol-v0.16.0
git-protocol-v0.17.0
git-protocol-v0.18.0
git-protocol-v0.18.1
git-protocol-v0.19.0
git-protocol-v0.19.1
git-protocol-v0.2.0
git-protocol-v0.20.0
git-protocol-v0.21.0
git-protocol-v0.3.0
git-protocol-v0.4.0
git-protocol-v0.4.1
git-protocol-v0.5.0
git-protocol-v0.6.0
git-protocol-v0.7.0
git-protocol-v0.8.0
git-protocol-v0.8.1
git-protocol-v0.9.0

git-quote-v0.*

git-quote-v0.1.0
git-quote-v0.2.0
git-quote-v0.2.1
git-quote-v0.3.0

git-rebase-v0.*

git-rebase-v0.0.0

git-ref-v0.*

git-ref-v0.1.0
git-ref-v0.10.0
git-ref-v0.11.0
git-ref-v0.12.0
git-ref-v0.12.1
git-ref-v0.13.0
git-ref-v0.14.0
git-ref-v0.15.0
git-ref-v0.15.1
git-ref-v0.15.2
git-ref-v0.15.3
git-ref-v0.15.4
git-ref-v0.16.0
git-ref-v0.17.0
git-ref-v0.2.0
git-ref-v0.3.0
git-ref-v0.4.0
git-ref-v0.4.1
git-ref-v0.5.0
git-ref-v0.5.1
git-ref-v0.5.2
git-ref-v0.5.3
git-ref-v0.5.4
git-ref-v0.6.0
git-ref-v0.7.0
git-ref-v0.7.1
git-ref-v0.7.2
git-ref-v0.7.3
git-ref-v0.8.0
git-ref-v0.9.0
git-ref-v0.9.1

git-refspec-v0.*

git-refspec-v0.0.0
git-refspec-v0.1.0
git-refspec-v0.1.1
git-refspec-v0.2.0
git-refspec-v0.3.0

git-repository-v0.*

git-repository-v0.1.0
git-repository-v0.10.0
git-repository-v0.11.0
git-repository-v0.12.0
git-repository-v0.13.0
git-repository-v0.14.0
git-repository-v0.15.0
git-repository-v0.16.0
git-repository-v0.17.0
git-repository-v0.18.0
git-repository-v0.18.1
git-repository-v0.19.0
git-repository-v0.20.0
git-repository-v0.21.0
git-repository-v0.21.1
git-repository-v0.22.0
git-repository-v0.22.1
git-repository-v0.23.0
git-repository-v0.23.1
git-repository-v0.24.0
git-repository-v0.25.0
git-repository-v0.3.0
git-repository-v0.4.0
git-repository-v0.5.0
git-repository-v0.6.0
git-repository-v0.7.0
git-repository-v0.7.1
git-repository-v0.7.2
git-repository-v0.8.0
git-repository-v0.8.1
git-repository-v0.8.2
git-repository-v0.9.0
git-repository-v0.9.1

git-revision-v0.*

git-revision-v0.0.0
git-revision-v0.1.0
git-revision-v0.2.0
git-revision-v0.2.1
git-revision-v0.3.0
git-revision-v0.4.0
git-revision-v0.4.1
git-revision-v0.4.2
git-revision-v0.4.3
git-revision-v0.4.4
git-revision-v0.5.0
git-revision-v0.6.0

git-sec-v0.*

git-sec-v0.0.0
git-sec-v0.1.0
git-sec-v0.1.1
git-sec-v0.1.2
git-sec-v0.2.0
git-sec-v0.3.0
git-sec-v0.3.1
git-sec-v0.4.0
git-sec-v0.4.1

git-sequencer-v0.*

git-sequencer-v0.0.0

git-tempfile-v0.*

git-tempfile-v0.1.0
git-tempfile-v0.2.0
git-tempfile-v0.3.0
git-tempfile-v0.4.0
git-tempfile-v0.5.0
git-tempfile-v0.6.0
git-tempfile-v0.6.1

git-tempfile-v1.*

git-tempfile-v1.0.0
git-tempfile-v1.0.1
git-tempfile-v1.0.2
git-tempfile-v1.0.3
git-tempfile-v1.0.4
git-tempfile-v1.0.5
git-tempfile-v1.0.6

git-tempfile-v2.*

git-tempfile-v2.0.0
git-tempfile-v2.0.1
git-tempfile-v2.0.2
git-tempfile-v2.0.3
git-tempfile-v2.0.4
git-tempfile-v2.0.5

git-testtools-v0.*

git-testtools-v0.1.0
git-testtools-v0.3.0
git-testtools-v0.4.0
git-testtools-v0.5.0
git-testtools-v0.6.0
git-testtools-v0.8.0
git-testtools-v0.9.0

git-tix-v0.*

git-tix-v0.0.0

git-transport-v0.*

git-transport-v0.0.0
git-transport-v0.10.0
git-transport-v0.10.1
git-transport-v0.11.0
git-transport-v0.11.1
git-transport-v0.12.0
git-transport-v0.13.0
git-transport-v0.13.1
git-transport-v0.14.0
git-transport-v0.15.0
git-transport-v0.16.0
git-transport-v0.17.0
git-transport-v0.18.0
git-transport-v0.19.0
git-transport-v0.19.1
git-transport-v0.19.2
git-transport-v0.19.3
git-transport-v0.2.0
git-transport-v0.2.1
git-transport-v0.20.0
git-transport-v0.21.0
git-transport-v0.3.0
git-transport-v0.4.0
git-transport-v0.5.0
git-transport-v0.5.1
git-transport-v0.6.0
git-transport-v0.7.0
git-transport-v0.8.0
git-transport-v0.9.0

git-traverse-v0.*

git-traverse-v0.0.0
git-traverse-v0.1.0
git-traverse-v0.10.0
git-traverse-v0.10.1
git-traverse-v0.11.0
git-traverse-v0.12.0
git-traverse-v0.13.0
git-traverse-v0.14.0
git-traverse-v0.15.0
git-traverse-v0.16.0
git-traverse-v0.16.1
git-traverse-v0.16.2
git-traverse-v0.16.3
git-traverse-v0.16.4
git-traverse-v0.17.0
git-traverse-v0.18.0
git-traverse-v0.2.0
git-traverse-v0.3.0
git-traverse-v0.3.1
git-traverse-v0.4.0
git-traverse-v0.5.0
git-traverse-v0.7.0
git-traverse-v0.7.1
git-traverse-v0.7.2
git-traverse-v0.8.0
git-traverse-v0.8.1
git-traverse-v0.8.2
git-traverse-v0.9.0

git-tui-v0.*

git-tui-v0.0.0

git-url-v0.*

git-url-v0.0.0
git-url-v0.1.0
git-url-v0.1.1
git-url-v0.10.0
git-url-v0.2.0
git-url-v0.3.0
git-url-v0.3.2
git-url-v0.3.3
git-url-v0.3.4
git-url-v0.3.5
git-url-v0.4.0
git-url-v0.5.0
git-url-v0.6.0
git-url-v0.7.0
git-url-v0.7.1
git-url-v0.7.2
git-url-v0.7.3
git-url-v0.8.0
git-url-v0.9.0

git-validate-v0.*

git-validate-v0.1.0
git-validate-v0.4.0
git-validate-v0.5.0
git-validate-v0.5.1
git-validate-v0.5.2
git-validate-v0.5.3
git-validate-v0.5.4
git-validate-v0.5.5
git-validate-v0.6.0

git-worktree-v0.*

git-worktree-v0.0.0
git-worktree-v0.1.0
git-worktree-v0.2.0
git-worktree-v0.3.0
git-worktree-v0.4.0
git-worktree-v0.4.1
git-worktree-v0.4.2
git-worktree-v0.4.3
git-worktree-v0.5.0
git-worktree-v0.6.0

gitoxide-core-v0.*

gitoxide-core-v0.1.0
gitoxide-core-v0.10.0
gitoxide-core-v0.10.1
gitoxide-core-v0.10.2
gitoxide-core-v0.10.3
gitoxide-core-v0.10.4
gitoxide-core-v0.10.5
gitoxide-core-v0.11.0
gitoxide-core-v0.12.0
gitoxide-core-v0.13.0
gitoxide-core-v0.14.0
gitoxide-core-v0.15.0
gitoxide-core-v0.16.0
gitoxide-core-v0.17.0
gitoxide-core-v0.18.0
gitoxide-core-v0.3.0
gitoxide-core-v0.4.0
gitoxide-core-v0.4.1
gitoxide-core-v0.6.0
gitoxide-core-v0.7.0
gitoxide-core-v0.8.0
gitoxide-core-v0.9.0

gitoxide-v0.*

gitoxide-v0.8.0
gitoxide-v0.8.1

v0.*

v0.1.0
v0.10.0
v0.11.0
v0.12.0
v0.13.0
v0.14.0
v0.15.0
v0.16.0
v0.3.0
v0.4.0
v0.4.1
v0.4.3
v0.5.0
v0.6.0
v0.7.0
v0.8.1
v0.8.2
v0.8.3
v0.8.4
v0.9.0