Product by Gitpython Project

    GitPython

    35 known vulnerabilities in GitPython (Gitpython Project), 0 of them actively exploited (CISA KEV).

    Key figures

    35

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in GitPython (Gitpython Project)
    HighCVE-2026-67325

    GitPython before 3.1.51 Command Injection via option prefix abbreviation

    also in 1 other product

    		8.8
    CriticalCVE-2022-24439

    Remote Code Execution (RCE)

    also in 2 other products

    		8.1
    HighCVE-2026-67323

    GitPython before 3.1.51 Command Injection via unguarded Git options

    also in 1 other product

    		8.4
    CriticalCVE-2026-78676

    GitPython before 3.1.59 Remote Code Execution via Config Injection

    also in 1 other product

    		9.8
    HighCVE-2026-76220

    GitPython before 3.1.58 Command Execution via split_single_char_options

    also in 2 other products

    		8.8
    HighCVE-2026-73625

    GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling

    also in 1 other product

    		8.8
    HighCVE-2026-73623

    GitPython before 3.1.54 Remote Code Execution via --template

    also in 1 other product

    		8.8
    HighCVE-2026-76221

    GitPython before 3.1.58 Config Injection via option-name

    also in 2 other products

    		8.8
    CriticalCVE-2026-67324

    GitPython 3.1.50 Authentication Bypass via Joined Short Options

    also in 1 other product

    		9.8
    CriticalCVE-2023-40267

    GitPython: security vulnerability

    also in 1 other product

    		9.8
    HighCVE-2026-78677

    GitPython before 3.1.59 Path Traversal via separate-git-dir

    also in 1 other product

    		7.5
    HighCVE-2026-76218

    GitPython before 3.1.58 Remote Code Execution via Repo.init

    also in 2 other products

    		7.5
    HighCVE-2026-87819

    GitPython before 3.1.60 Denial of Service via ReDoS

    also in 1 other product

    		7.5
    HighCVE-2026-42215

    GitPython: Command injection via Git options bypass

    also in 2 other products

    		8.8
    HighCVE-2026-73622

    GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()

    also in 1 other product

    		7.5
    HighCVE-2026-73620

    GitPython before 3.1.57 Arbitrary File Overwrite and Read

    also in 1 other product

    		8.1
    HighCVE-2026-76219

    GitPython before 3.1.58 Arbitrary File Overwrite via read-tree

    also in 2 other products

    		8.1
    HighCVE-2026-87817

    GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

    also in 2 other products

    		8.8
    HighCVE-2026-73624

    GitPython before 3.1.54 Arbitrary File Overwrite via diff

    also in 1 other product

    		8.1
    HighCVE-2026-76222

    GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name

    also in 2 other products

    		8.2
    CriticalCVE-2026-42284

    GitPython: Unsafe option check validates multi_options before shlex.split transforms it

    also in 2 other products

    		8.1
    HighCVE-2026-87818

    GitPython 3.1.59 Local File Content Oracle via --no-index

    also in 1 other product

    		6.5
    HighCVE-2026-67322

    GitPython before 3.1.52 Environment Variable Exfiltration via clone_from

    also in 1 other product

    		7.5
    HighCVE-2026-78678

    GitPython before 3.1.59 Arbitrary File Read via Repo.blame()

    also in 1 other product

    		6.5
    HighCVE-2026-76217

    GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file

    also in 1 other product

    		6.5

    All vulnerabilities in search

    News

    All products by Gitpython Project