Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/08/03 1:20 p.m.46 views

CVE-2026-69097 GitPython before 3.1.53 Config Injection via Submodule Names

GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config via...

7.3CVSS0.00187EPSS
SaveExploits0References2
Rows per page
Query Builder