{"id":"CVE-2023-53158","aliases":["GHSA-rrjw-j4m2-mf34","RUSTSEC-2023-0064"],"url":"https://o3.security/vulnerability/CVE-2023-53158","summary":"gix-transport code execution vulnerability","details":"The `gix-transport` crate prior to the patched version 0.36.1 would allow attackers to use malicious ssh clone URLs to pass arbitrary arguments to the `ssh` program, leading to arbitrary code execution.\n\nPoC: `gix clone 'ssh://-oProxyCommand=open$IFS-aCalculator/foo'`\n\nThis will launch a calculator on OSX.\n\nSee https://secure.phabricator.com/T12961 for more details on similar vulnerabilities in `git`.\n\nThanks for [vin01](https://github.com/vin01) for disclosing this issue.","published":"2025-07-28T00:00:00Z","modified":"2026-10-28T02:30:37.871632297Z","cvss":{"score":4.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":{"score":0.00171,"percentile":0.0654,"asOf":"2026-08-24"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"gix-transport","fixedVersion":"0.36.1"}],"fix":{"url":"https://github.com/GitoxideLabs/gitoxide/pull/1032","label":"GitoxideLabs/gitoxide#1032"},"references":[{"type":"WEB","url":"https://crates.io/crates/gix-transport"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53158.json"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-rrjw-j4m2-mf34"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53158"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2023-0064.html"},{"type":"FIX","url":"https://github.com/GitoxideLabs/gitoxide/pull/1032"},{"type":"PACKAGE","url":"https://github.com/GitoxideLabs/gitoxide"},{"type":"WEB","url":"https://secure.phabricator.com/T12961"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-28T02:30:37.871632297Z"}}