Package
cargo-c
Component
gix
Latest update
Fixed version
0.10.24-r0
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
0.10.24-r0Status
Impact
cargo-c is tightly coupled to a specific version of cargo, which transitively pulls in this gix ecosystem package. cargo/cargo-c upstreams will need to move their respective dependencies forward for remediation.
Status
Impact
Bumping gix to fix GHSA-f26g-jm89-4g65 is blocked by cargo-c's transitive dependency on cargo v0.96.0, which pins gix = ^0.79. The required gix-fs/gix-pack/gix-transport semver-major bumps cannot be retargeted via cargobump. Waiting on upstream cargo to release a version that consumes a fixed gix line.
Status