550 matches found
CVE-2026-73619 GitPython before 3.1.57 Arbitrary File Read via Repo.archive()
GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive to read arbitrary files from the filesystem and include them in the returned archive...
EUVD-2026-57823
GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive to read arbitrary files from the filesystem and include them in the returned archive...
CVE-2026-73619
GitPython before 3.1.57 is affected by an incomplete denylist in the unsafe_git_archive_options guard, which omits the --add-file and --add-virtual-file options. This allows an attacker to craft calls to Repo.archive() that can read arbitrary files from the filesystem and include them in the resu...
CVE-2026-73619
GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive to read arbitrary files from the filesystem and include them in the returned archive...
CVE-2026-73619 GitPython before 3.1.57 Arbitrary File Read via Repo.archive()
GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive to read arbitrary files from the filesystem and include them in the returned archive...
ROOT-APP-PYPI-GHSA-RWJ8-PGH3-R573 GHSA-rwj8-pgh3-r573 in GitPython - Patched by Root
Root has patched GHSA-rwj8-pgh3-r573 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-94P4-4CQ8-9G67 GHSA-94p4-4cq8-9g67 in GitPython - Patched by Root
Root has patched GHSA-94p4-4cq8-9g67 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-MV93-W799-CJ2W GHSA-mv93-w799-cj2w in GitPython - Patched by Root
Root has patched GHSA-mv93-w799-cj2w in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-44244 CVE-2026-44244 in GitPython - Patched by Root
Root has patched CVE-2026-44244 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-6P8H-3WGX-97GF GHSA-6p8h-3wgx-97gf in GitPython - Patched by Root
Root has patched GHSA-6p8h-3wgx-97gf in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-2F96-G7MH-G2HX GHSA-2f96-g7mh-g2hx in GitPython - Patched by Root
Root has patched GHSA-2f96-g7mh-g2hx in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-956X-8GVW-WG5V GHSA-956x-8gvw-wg5v in GitPython - Patched by Root
Root has patched GHSA-956x-8gvw-wg5v in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-44243 CVE-2026-44243 in GitPython - Patched by Root
Root has patched CVE-2026-44243 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-3F7W-8RR8-F37F GHSA-3f7w-8rr8-f37f in GitPython - Patched by Root
Root has patched GHSA-3f7w-8rr8-f37f in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-FJR4-X663-MWXC GHSA-fjr4-x663-mwxc in GitPython - Patched by Root
Root has patched GHSA-fjr4-x663-mwxc in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-539M-9XH6-Q6RR GHSA-539m-9xh6-q6rr in GitPython - Patched by Root
Root has patched GHSA-539m-9xh6-q6rr in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-R9MR-M37C-5FR3 GHSA-r9mr-m37c-5fr3 in GitPython - Patched by Root
Root has patched GHSA-r9mr-m37c-5fr3 in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-42284 CVE-2026-42284 in GitPython - Patched by Root
Root has patched CVE-2026-42284 in the GitPython package for Root:PyPI. Multiple fixed versions available...