Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

GitPython

pypi

GitPython is a Python library used to interact with Git repositories

View on github.com · View on pypi.org

Security Advisories for GitPython in pypi

High
7 days ago

GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution GSA_kwCzR0hTQS13dnBwLThoeDktcDY2as4ABhvf

pypi GitPython
High
7 days ago

GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE) GSA_kwCzR0hTQS1qbTc4LTlmdnYtbWhncs4ABhve

pypi GitPython
High
7 days ago

GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython GSA_kwCzR0hTQS1obXEyLXc1OGYtMjdqY84ABhvd

pypi GitPython
Moderate
7 days ago

GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout() GSA_kwCzR0hTQS1oaDlwLTZ3aDItNG1mY84ABhvc

pypi GitPython
High
7 days ago

GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks GSA_kwCzR0hTQS05cmo3LXJmMnAtdzc3cs4ABhvb

pypi GitPython
High
7 days ago

GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite GSA_kwCzR0hTQS00Z213LWdnMm0tdzQ2cM4ABhva

pypi GitPython
Moderate
11 days ago

GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count GSA_kwCzR0hTQS1wNTM4LWM0MzQtOHYyNM4ABhHL

pypi GitPython
Moderate
11 days ago

GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive() GSA_kwCzR0hTQS01MzltLTl4aDYtcTZycs4ABhHJ

pypi GitPython
High
11 days ago

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read GSA_kwCzR0hTQS0zZjd3LThycjgtZjM3Zs4ABhHI

pypi GitPython
High
21 days ago

GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573) GSA_kwCzR0hTQS05NHA0LTRjcTgtOWc2N84ABftC

pypi GitPython
High
21 days ago

GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution GSA_kwCzR0hTQS1yOW1yLW0zN2MtNWZyM84ABfq5

pypi GitPython
High
21 days ago

GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks GSA_kwCzR0hTQS02cDhoLTN3Z3gtOTdnZs4ABfq4

pypi GitPython
High
21 days ago

GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled) GSA_kwCzR0hTQS1manI0LXg2NjMtbXd4Y84ABfq3

pypi GitPython
High
21 days ago

GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE) GSA_kwCzR0hTQS0zcnA1LWpqbXctNHd2Ms4ABfqy

pypi gitpython
High
24 days ago

GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL GSA_kwCzR0hTQS1yd2o4LXBnaDMtcjU3M84ABfLp

pypi gitpython
High
24 days ago

GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()` GSA_kwCzR0hTQS05NTZ4LThndnctd2c1ds4ABfJZ

pypi GitPython
High
24 days ago

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist GSA_kwCzR0hTQS0yZjk2LWc3bWgtZzJoeM4ABfJY

pypi GitPython
High
24 days ago

GitPython unsafe clone option gate bypass through joined short options GSA_kwCzR0hTQS12Mzk2LXY3cTQteDJxas4ABfJX

pypi GitPython
High
3 months ago

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath GSA_kwCzR0hTQS1tdjkzLXc3OTktY2oyd84ABWgu

pypi GitPython
High
3 months ago

GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath GSA_kwCzR0hTQS12ODdyLTZxM2YtMmo2N84ABWWV

pypi GitPython
High
3 months ago

GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository GSA_kwCzR0hTQS03NTQ1LWZjeHEtN2oyNM4ABWTM

pypi GitPython
High
4 months ago

GitPython has Command Injection via Git options bypass GSA_kwCzR0hTQS1ycG01LTY1Y3ctNmhqNM4ABVyD

pypi GitPython
High
4 months ago

GitPython: Unsafe option check validates multi_options before shlex.split transformation GSA_kwCzR0hTQS14MnF4LTY5NTMtODQ4Nc4ABVyC

pypi GitPython
High
over 2 years ago

Untrusted search path under some conditions on Windows allows arbitrary code execution GSA_kwCzR0hTQS0ybXFqLW02NXctamdoeM4AA4Vh

pypi GitPython
Moderate
almost 3 years ago

GitPython blind local file inclusion GSA_kwCzR0hTQS1jd3ZtLXY0dzgtcTU4Y84AA1lK

pypi GitPython
High
almost 3 years ago

GitPython untrusted search path on Windows systems leading to arbitrary code execution GSA_kwCzR0hTQS13Zm01LXYzNWgtdndmNM4AA1jX

pypi gitpython
Critical
about 3 years ago

GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments GSA_kwCzR0hTQS1wcjc2LTVjbTUtdzljas4AA1Py

pypi GitPython
Critical
over 3 years ago

GitPython vulnerable to Remote Code Execution due to improper user input validation GSA_kwCzR0hTQS1oY3BqLXFwNTUtZ2ZwaM4AAwKi

pypi GitPython

Filter by Severity

High 22 Moderate 4 Critical 2