CVE-2026-114145

The GitPython Python library is vulnerable to Remote Code Execution (RCE) in versions prior to 3.2.1 . The root cause is that the create_submodule() function in git/objects/submodule/base.py fails to validate an attacker-influenced submodule path (such as .git/hooks) before invoking _clone_repo()...