Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

GitPython

pypi

GitPython is a Python library used to interact with Git repositories

View on github.com · View on pypi.org

Security Advisories for GitPython in pypi

High
about 5 hours ago

GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573) GSA_kwCzR0hTQS05NHA0LTRjcTgtOWc2N84ABftC

pypi GitPython
High
about 10 hours ago

GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution GSA_kwCzR0hTQS1yOW1yLW0zN2MtNWZyM84ABfq5

pypi GitPython
High
about 10 hours ago

GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks GSA_kwCzR0hTQS02cDhoLTN3Z3gtOTdnZs4ABfq4

pypi GitPython
High
about 10 hours ago

GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled) GSA_kwCzR0hTQS1manI0LXg2NjMtbXd4Y84ABfq3

pypi GitPython
High
about 10 hours ago

GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE) GSA_kwCzR0hTQS0zcnA1LWpqbXctNHd2Ms4ABfqy

pypi gitpython
High
3 days ago

GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL GSA_kwCzR0hTQS1yd2o4LXBnaDMtcjU3M84ABfLp

pypi gitpython
High
3 days ago

GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()` GSA_kwCzR0hTQS05NTZ4LThndnctd2c1ds4ABfJZ

pypi GitPython
High
3 days ago

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist GSA_kwCzR0hTQS0yZjk2LWc3bWgtZzJoeM4ABfJY

pypi GitPython
High
3 days ago

GitPython unsafe clone option gate bypass through joined short options GSA_kwCzR0hTQS12Mzk2LXY3cTQteDJxas4ABfJX

pypi GitPython
High
3 months ago

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath GSA_kwCzR0hTQS1tdjkzLXc3OTktY2oyd84ABWgu

pypi GitPython
High
3 months ago

GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath GSA_kwCzR0hTQS12ODdyLTZxM2YtMmo2N84ABWWV

pypi GitPython
High
3 months ago

GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository GSA_kwCzR0hTQS03NTQ1LWZjeHEtN2oyNM4ABWTM

pypi GitPython
High
3 months ago

GitPython has Command Injection via Git options bypass GSA_kwCzR0hTQS1ycG01LTY1Y3ctNmhqNM4ABVyD

pypi GitPython
High
3 months ago

GitPython: Unsafe option check validates multi_options before shlex.split transformation GSA_kwCzR0hTQS14MnF4LTY5NTMtODQ4Nc4ABVyC

pypi GitPython
High
over 2 years ago

Untrusted search path under some conditions on Windows allows arbitrary code execution GSA_kwCzR0hTQS0ybXFqLW02NXctamdoeM4AA4Vh

pypi GitPython
Moderate
almost 3 years ago

GitPython blind local file inclusion GSA_kwCzR0hTQS1jd3ZtLXY0dzgtcTU4Y84AA1lK

pypi GitPython
High
almost 3 years ago

GitPython untrusted search path on Windows systems leading to arbitrary code execution GSA_kwCzR0hTQS13Zm01LXYzNWgtdndmNM4AA1jX

pypi gitpython
Critical
almost 3 years ago

GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments GSA_kwCzR0hTQS1wcjc2LTVjbTUtdzljas4AA1Py

pypi GitPython
Critical
over 3 years ago

GitPython vulnerable to Remote Code Execution due to improper user input validation GSA_kwCzR0hTQS1oY3BqLXFwNTUtZ2ZwaM4AAwKi

pypi GitPython

Filter by Severity

High 16 Critical 2 Moderate 1