CLSA-2026-1789368141 TuxCare security update for gitpython (5 CVEs)

🗓️ 14 Sep 2026 06:42:21Reported by GoogleType

osv🔗 osv.dev👁 10 Views

TuxCare gitpython 3.1.31.post12 update fixes 5 CVEs.

Reporter	Title	Published	Views	Family All 204
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Oct 202615:21	–	ibm
AlpineLinux	CVE-2026-78675	25 Aug 202601:30	–	alpinelinux
AlpineLinux	CVE-2026-78676	25 Aug 202601:30	–	alpinelinux
AlpineLinux	CVE-2026-78677	25 Aug 202601:30	–	alpinelinux
AlpineLinux	CVE-2026-78678	25 Aug 202601:30	–	alpinelinux
BDU FSTEC	The vulnerability of the Repo.clone_from() and Repo.clone() functions in the git/repo/base.py module of the Python library for interacting with Git repositories in GitPython allows a malicious actor to write arbitrary files.	27 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `GitConfigParser._read()` function of the `git/config.py` module in the Python library for interacting with Git repositories in GitPython allows a attacker to execute arbitrary code.	27 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Submodule._config parser function in the Python library for interacting with Git repositories in GitPython allows a malicious actor to execute arbitrary code.	27 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the Repo.blame() and Repo.blame_incremental() functions, which are part of the security mechanism for the unsafe_git_revision_options library in the Python library for interacting with Git repositories in GitPython, allow attackers to gain unauthorized access to protected information.	28 Aug 202600:00	–	bdu_fstec
Chainguard	CVE-2026-78675 vulnerabilities	16 Sep 202602:54	–	cgr

14 Sep 2026 16:45Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.8 - 9.8

CVSS 49.3

EPSS0.00775

SSVC

gitpython TuxCare security update 5 CVEs