High 7.1Published Jan 26, 2026

CVE-2026-0810A flaw was found in gix-date.

Updated under an hour ago (2026-10-19 08:00 UTC)

Does this affect you?

It affects gitoxidelabs gix-date. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for gitoxidelabs gix-date

Exploited in the last 30 days

A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.

CVSS: 7.1 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness (CWE): CWE-135, CWE-682
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

gitoxidelabs gix-date gitoxidelabs:gix-date	before 0.12.0	NVD

References

https://access.redhat.com/security/cve/CVE-2026-0810third-party-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2427057issue-tracking
https://crates.io/crates/gix-dateproduct
https://github.com/GitoxideLabs/gitoxide/issues/2305exploit, issue-tracking
https://rustsec.org/advisories/RUSTSEC-2025-0140.htmlthird-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.