3 matches found
CVE-2026-67322 vulnerabilities
Vulnerabilities for packages: mlflow, checkov...
8.7CVSS7.3AI score0.00328EPSS
SaveExploits1
SUSE CVE-2026-67322
GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied remote URL is passed through Git.polishurl, which on non-Cygwin platforms calls os.path.expandvars on the URL before invoking git clone. An attacker who controls the clone URL can emb...
7.5CVSS7.3AI score0.00328EPSS
SaveExploits1References4
CVE-2026-67322
GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied remote URL is passed through Git.polishurl, which on non-Cygwin platforms calls os.path.expandvars on the URL before invoking git clone. An attacker who controls the clone URL can emb...
8.7CVSS0.00328EPSS
SaveExploits1References2
20