gitpython-developers GitPython

• CVE-2026-114145 High 7.5 GitPython validates a submodule's ".git" path only after cloning into it (RCE) 0.4%
• CVE-2026-110860 Medium 6.1 GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move() 0.2%
• CVE-2026-110859 High 7.5 GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name 0.4%
• CVE-2026-110858 High 8.1 GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec 0.5%
• CVE-2026-110857 High 7.5 GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs 0.4%
• CVE-2026-110856 High 7.5 GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date 0.3%
• CVE-2026-110855 Medium 6.5 GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name 0.3%
• CVE-2026-100689 Medium 5.9 GitPython before 3.1.62 Path Traversal via gitmodules path 0.4%
• CVE-2026-87819 High 7.5 GitPython before 3.1.60 Denial of Service via ReDoS 0.5%
• CVE-2026-87818 Medium 6.5 GitPython 3.1.59 Local File Content Oracle via --no-index 0.4%
• CVE-2026-87817 High 8.8 GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation 0.4%
• CVE-2026-78679 Medium 6.5 GitPython before 3.1.59 Arbitrary File Read via TagReference.create 0.3%
• CVE-2026-78678 Medium 6.5 GitPython before 3.1.59 Arbitrary File Read via Repo.blame() 0.4%
• CVE-2026-78677 High 7.5 GitPython before 3.1.59 Path Traversal via separate-git-dir 0.7%
• CVE-2026-78676 Critical 9.8 GitPython before 3.1.59 Remote Code Execution via Config Injection 0.6%
• CVE-2026-78675 High 8.4 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules 0.2%
• CVE-2026-76222 High 8.2 GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name 0.4%
• CVE-2026-76221 High 8.8 GitPython before 3.1.58 Config Injection via option-name 0.5%
• CVE-2026-76220 High 8.8 GitPython before 3.1.58 Command Execution via split_single_char_options 0.6%
• CVE-2026-76219 High 8.1 GitPython before 3.1.58 Arbitrary File Overwrite via read-tree 0.5%
• CVE-2026-76218 High 7.5 GitPython before 3.1.58 Remote Code Execution via Repo.init 0.7%
• CVE-2026-76217 Medium 6.5 GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file 0.4%
• CVE-2026-73625 High 8.8 GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling 0.7%
• CVE-2026-73624 High 8.1 GitPython before 3.1.54 Arbitrary File Overwrite via diff 0.6%
• CVE-2026-73623 High 7.5 GitPython before 3.1.54 Remote Code Execution via --template 1.0%
• CVE-2026-73622 High 7.5 GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add() 0.5%
• CVE-2026-73621 Medium 5.4 GitPython before 3.1.56 Arbitrary File Truncation via Commit.count 0.4%
• CVE-2026-73620 High 8.1 GitPython before 3.1.57 Arbitrary File Overwrite and Read 0.6%
• CVE-2026-73619 Medium 6.5 GitPython before 3.1.57 Arbitrary File Read via Repo.archive() 0.4%
• CVE-2026-69097 High 7.0 GitPython before 3.1.53 Config Injection via Submodule Names 0.3%
• CVE-2026-67326 High 7.0 GitPython before 3.1.50 Newline Injection via config_writer section 0.3%
• CVE-2026-67324 Critical 9.8 GitPython 3.1.50 Authentication Bypass via Joined Short Options 0.5%
• CVE-2026-67323 High 8.4 GitPython before 3.1.51 Command Injection via unguarded Git options 1.3%
• CVE-2026-67322 High 7.5 GitPython before 3.1.52 Environment Variable Exfiltration via clone_from 0.3%
• CVE-2026-67325 High 8.8 GitPython before 3.1.51 Command Injection via option prefix abbreviation 2.2%
• CVE-2026-44243 High 7.8 GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository 0.4%
• CVE-2026-44244 High 7.8 GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath 0.2%
• CVE-2026-42284 High 8.1 GitPython: Unsafe option check validates multi_options before shlex.split transforms it 0.6%
• CVE-2026-42215 High 8.8 GitPython: Command injection via Git options bypass 0.7%
• CVE-2024-22190 High 7.8 Untrusted search path under some conditions on Windows allows arbitrary code execution 0.3%
• CVE-2023-41040 Medium 4.0 GitPython blind local file inclusion 1.1%
• CVE-2023-40590 High 7.8 Untrusted search path on Windows systems leading to arbitrary code execution 0.5%