CVE catalog

CVE-2026-91986

Security update for gitoxide

[CVE catalog]

Severity
Medium · CVSS 5.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.23% · Oct 23, 2026

These are all security issues fixed in the openai-codex-0.158.0-1.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensuseopenai-codextumbleweed0.158.0-1.1fixed
Opensusegitoxideleap 16.00.56.0-bp160.2.1fixed
Opensusegitoxidetumbleweed0.58.0-2.1fixed
Debianrust-gix-transport130.44.0-1vulnerable
Debianrust-gix-transport130.48.0-1vulnerable
Debianrust-gix-transport130.48.0-2vulnerable
Debianrust-gix-transport130.57.0-1vulnerable
Debianrust-gix-transport130.58.1-1vulnerable
Debianrust-gix-transport130.59.2-1vulnerable
Debianrust-gix-transport140.44.0-1vulnerable
Debianrust-gix-transport140.48.0-1vulnerable
Debianrust-gix-transport140.48.0-2vulnerable
Debianrust-gix-transport140.57.0-1vulnerable
Debianrust-gix-transport140.58.1-1vulnerable
Debianrust-gix-transport140.59.2-1vulnerable
Opensusegitoxideleap 16.00.60.0-bp160.1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensuseopenai-codexrpmtumbleweed0.158.0-1.1Not reportedOPENSUSE-SU-2026:11923-1Not reported
Opensusegitoxiderpmleap 16.00.56.0-bp160.2.1Not reportedOPENSUSE-SU-2026:21955-1Not reported
Opensusegitoxiderpmtumbleweed0.58.0-2.1Not reportedOPENSUSE-SU-2026:11857-1Not reported
Opensusegitoxiderpmleap 16.00.60.0-bp160.1.1Not reportedOPENSUSE-SU-2026:22126-1Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [librust-gix-transport-dev]Affected

    Source package: [rust-gix-transport]

    Details (2)

    • 0.44.0-1 · amd64 · trixie

      Affected

      pypi · rust-gix-transport · debian · 13

    • 0.44.0-1 · arm64 · trixie

      Affected

      pypi · rust-gix-transport · debian · 13

[openSUSE Tumbleweed]

  • [gitoxide]Affected

    Source package: [gitoxide]

    Details (1)

    • 0.58.0-1.1 · x86_64 · tumbleweed

      Affected · Fixed: 0.58.0-2.1

      pypi · gitoxide · opensuse · tumbleweed

  • [openai-codex]Affected

    Source package: [openai-codex]

    Details (1)

    • 0.149.1-1.1 · x86_64 · tumbleweed

      Affected · Fixed: 0.158.0-1.1

      pypi · openai-codex · opensuse · tumbleweed

  • [openai-codex-bash-completion]Unknown

    Source package: [openai-codex]

    Details (1)

    • 0.149.1-1.1 · noarch · tumbleweed

      Unknown · Fixed: 0.158.0-1.1

      Version impact unknown

      pypi · openai-codex · opensuse · tumbleweed

  • [openai-codex-fish-completion]Unknown

    Source package: [openai-codex]

    Details (1)

    • 0.149.1-1.1 · noarch · tumbleweed

      Unknown · Fixed: 0.158.0-1.1

      Version impact unknown

      pypi · openai-codex · opensuse · tumbleweed

  • [openai-codex-zsh-completion]Unknown

    Source package: [openai-codex]

    Details (1)

    • 0.149.1-1.1 · noarch · tumbleweed

      Unknown · Fixed: 0.158.0-1.1

      Version impact unknown

      pypi · openai-codex · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]