GHSA-FX3J-RWGX-FR94 GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

Summary Repo.clone's handling of separategitdir never disables Git.polishurl's environment-variable expansion, unlike every other caller of that helper that handles attacker-influenced data. Since separategitdir can be derived from an attacker-controlled .gitmodules submodule name, a completely...

GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

Summary Repo.clone's handling of separategitdir never disables Git.polishurl's environment-variable expansion, unlike every other caller of that helper that handles attacker-influenced data. Since separategitdir can be derived from an attacker-controlled .gitmodules submodule name, a completely...

GitPython Repo._clone() Unauthenticated Access Disclosure

The vulnerability of the Repo.clone function in the Python library for interacting with Git repositories in GitPython is related to information disclosure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

SUSE CVE-2026-110855

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

Exposure of Sensitive Information Through Environmental Variables

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Environmental Variables via Repo.clone in git/repo/base.py, which calls Git.polishurl on the separategitdir argument without...

EUVD-2026-101738

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

UBUNTU-CVE-2026-110855

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

Linux Distros Unpatched Vulnerability : CVE-2026-110855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in...

CVE-2026-110855

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

DEBIAN-CVE-2026-110855

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

CVE-2026-110855

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

CVE-2026-110855

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

CVE-2026-110855

The GitPython library before version 3.2.0 is vulnerable to an information disclosure flaw. The issue exists because the Repo._clone() function fails to set expand_vars=False when calling Git.polish_url(), allowing the expansion of environment variables via separate_git_dir. An attacker can craft...

CVE-2026-110855 GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

CVE-2026-110855 GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

CVE-2026-110855

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

CVE-2026-110855 GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

CVE-2026-110855: Exposure of Sensitive Information to an Unauthorized Actor

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...