Lucene search

Alpine Linux Development TeamALPINE:CVE-2024-22190

HistoryJan 11, 2024 - 2:15 a.m.

CVE-2024-22190

2024-01-1102:15:48

Alpine Linux Development Team

security.alpinelinux.org

gitpython

untrusted search path

windows

vulnerability

cve-2024-22190

patch

version 3.1.41

repositories

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

21.5%

JSON

GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run git, as well as when it runs bash.exe to interpret hooks. If either of those features are used on Windows, a malicious git.exe or bash.exe may be run from an untrusted repository. This issue has been patched in version 3.1.41.

OSVersionArchitecturePackageVersionFilename
Alpine3.19-communitynoarchpy3-gitpython= 3.1.40-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.19-community	noarch	py3-gitpython	= 3.1.40-r0	UNKNOWN