From the GitComet pre-launch security audit (2026-08-16, 8 dimension reviewers + adversarial refutation-review; 53 confirmed findings). The audit report was removed from the repo; findings are tracked as issues.
Finding #50 — severity: LOW
crates/gitcomet-git-gix/src/repo/patch.rs:11-31 + crates/gitcomet-state/src/msg/effect.rs:0 [low] format-patch export writes commit data to attacker-influenced dest without verifying symlink safety
Status: UNVERIFIED — needs triage.
From the GitComet pre-launch security audit (2026-08-16, 8 dimension reviewers + adversarial refutation-review; 53 confirmed findings). The audit report was removed from the repo; findings are tracked as issues.
Finding #50 — severity: LOW
crates/gitcomet-git-gix/src/repo/patch.rs:11-31 + crates/gitcomet-state/src/msg/effect.rs:0[low] format-patch export writes commit data to attacker-influenced dest without verifying symlink safetyStatus: UNVERIFIED — needs triage.