A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2026-0810 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2427057 | Issue Tracking |
| https://crates.io/crates/gix-date | Product |
| https://github.com/GitoxideLabs/gitoxide/issues/2305 | Exploit Issue Tracking |
| https://rustsec.org/advisories/RUSTSEC-2025-0140.html | Third Party Advisory |
| https://github.com/GitoxideLabs/gitoxide/issues/2305 | Exploit Issue Tracking |
Configurations
History
13 Feb 2026, 15:11
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Gitoxidelabs gix-date
Gitoxidelabs |
|
| CWE | CWE-682 | |
| CPE | cpe:2.3:a:gitoxidelabs:gix-date:*:*:*:*:*:rust:*:* | |
| References | () https://access.redhat.com/security/cve/CVE-2026-0810 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2427057 - Issue Tracking | |
| References | () https://crates.io/crates/gix-date - Product | |
| References | () https://github.com/GitoxideLabs/gitoxide/issues/2305 - Exploit, Issue Tracking | |
| References | () https://rustsec.org/advisories/RUSTSEC-2025-0140.html - Third Party Advisory |
26 Jan 2026, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/GitoxideLabs/gitoxide/issues/2305 - |
26 Jan 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-26 20:16
Updated : 2026-02-13 15:11
NVD link : CVE-2026-0810
Mitre link : CVE-2026-0810
CVE.ORG link : CVE-2026-0810
JSON object : View
Products Affected
gitoxidelabs
- gix-date