Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:12 p.m.16 views

CVE-2026-44243

A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows attackers to supply a specially crafted reference path to an application utilizing GitPython. Due to insufficient validation of these paths during reference creation, renaming, or...

8.8CVSS7.6AI score0.00419EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2026/05/09 2:39 a.m.17 views

SUSE CVE-2026-44243

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository's .git directory...

6.5CVSS5.7AI score0.00419EPSS
SaveExploits1References4
OSV
OSV
added 2026/05/07 7:16 p.m.7 views

DEBIAN-CVE-2026-44243

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory...

7.1CVSS5.7AI score0.00419EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/05/07 6:22 p.m.11 views

CVE-2026-44243

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory...

8.8CVSS5.7AI score0.00419EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/05/07 6:22 p.m.9 views

CVE-2026-44243 GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory...

8.8CVSS7.1AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/07 6:22 p.m.12 views

CVE-2026-44243 GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory...

8.8CVSS5.7AI score0.00419EPSS
SaveExploits1References2
CVE
CVE
added 2026/05/07 6:22 p.m.53 views

CVE-2026-44243

GitPython (Python library for interacting with Git repositories) contains a path-traversal vulnerability in its reference APIs. Before version 3.1.48, attacker-controlled reference names can be used to cause writes, renames, or deletions of files outside the repository’s .git directory due to ins...

8.8CVSS5.7AI score0.00419EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/06 12:00 a.m.14 views

PT-2026-38294

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.48 Description Insufficient validation of reference paths in reference creation, rename, and delete operations allows attackers to write, overwrite, move, or delete files outside the repository's .git directory...

8.8CVSS5.8AI score0.00749EPSS
SaveExploits3References33
OSV
OSV
added 2023/03/28 9:15 p.m.6 views

DEBIAN-CVE-2023-28447

Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthorized access to sensitive user data,...

6.1CVSS7.3AI score0.01025EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2023/03/28 8:07 p.m.113 views

CVE-2023-28447

Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthorized access to sensitive user data,...

7.1CVSS6.7AI score0.01025EPSS
SaveExploits0
Rows per page
Query Builder