1064 matches found
GitPython: GitPython: Remote Code Execution via Git directory impersonation
A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...
gitpython: GitPython: Arbitrary code execution via command injection due to unguarded Git options
A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive and git.lsremote, potentially leading to arbitrary code execution. Additionally, functions such as...
gitpython: GitPython: Command Injection via Git option prefix abbreviation
A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...
gitpython: GitPython: Environment variable exfiltration via attacker-controlled clone URL
A flaw was found in GitPython. A remote attacker can exploit a vulnerability in the Repo.clonefrom method by providing a specially crafted Git repository URL. This URL can contain references to environment variables, which are then expanded and included in the URL. This allows the attacker to...
gitpython: GitPython: Environment variable exfiltration via attacker-controlled clone URL
A flaw was found in GitPython. A remote attacker can exploit a vulnerability in the Repo.clonefrom method by providing a specially crafted Git repository URL. This URL can contain references to environment variables, which are then expanded and included in the URL. This allows the attacker to...
gitpython: GitPython: Arbitrary code execution via command injection due to unguarded Git options
A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive and git.lsremote, potentially leading to arbitrary code execution. Additionally, functions such as...
GitPython: GitPython: Remote Code Execution via Git directory impersonation
A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...
gitpython: GitPython: Command Injection via Git option prefix abbreviation
A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...
GitPython: GitPython: Arbitrary file read via TagReference.create()
A flaw was found in GitPython. A remote attacker with low privileges can exploit a vulnerability in the TagReference.create function, where a positional reference parameter bypasses a security guard. This allows the attacker to supply a specially crafted reference value, such as --file=, to read...
ROOT-APP-PYPI-CVE-2026-76219 CVE-2026-76219 in GitPython - Patched by Root
Root has patched CVE-2026-76219 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-2F96-G7MH-G2HX GHSA-2f96-g7mh-g2hx in GitPython - Patched by Root
Root has patched GHSA-2f96-g7mh-g2hx in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-6P8H-3WGX-97GF GHSA-6p8h-3wgx-97gf in GitPython - Patched by Root
Root has patched GHSA-6p8h-3wgx-97gf in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-HMQ2-W58F-27JC GHSA-hmq2-w58f-27jc in GitPython - Patched by Root
Root has patched GHSA-hmq2-w58f-27jc in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-4VPG-PFJ8-M33Q GHSA-4vpg-pfj8-m33q in GitPython - Patched by Root
Root has patched GHSA-4vpg-pfj8-m33q in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-94P4-4CQ8-9G67 GHSA-94p4-4cq8-9g67 in GitPython - Patched by Root
Root has patched GHSA-94p4-4cq8-9g67 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-76218 CVE-2026-76218 in GitPython - Patched by Root
Root has patched CVE-2026-76218 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-44244 CVE-2026-44244 in GitPython - Patched by Root
Root has patched CVE-2026-44244 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-M4F3-G4CQ-HQRX GHSA-m4f3-g4cq-hqrx in GitPython - Patched by Root
Root has patched GHSA-m4f3-g4cq-hqrx in the GitPython package for Root:PyPI. Multiple fixed versions available...