GitPython before 3.1.59 Remote Code Execution via Config Injection

GitPython 3.1.50 Authentication Bypass via Joined Short Options

GitPython: Unsafe option check validates multi_options before shlex.split transforms it

GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

GitPython before 3.1.58 Config Injection via option-name

GitPython before 3.1.58 Command Execution via split_single_char_options

GitPython before 3.1.58 Remote Code Execution via Repo.init

GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling

GitPython before 3.1.54 Remote Code Execution via --template

GitPython before 3.1.51 Command Injection via option prefix abbreviation

GitPython: Command injection via Git options bypass

GitPython before 3.1.51 Command Injection via unguarded Git options

GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name

GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec

GitPython before 3.1.58 Arbitrary File Overwrite via read-tree

GitPython before 3.1.54 Arbitrary File Overwrite via diff

GitPython before 3.1.57 Arbitrary File Overwrite and Read

GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.50 Newline Injection via config_writer section

GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath

GitPython validates a submodule's ".git" path only after cloning into it (RCE)

GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name

GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs

GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date

GitPython before 3.1.60 Denial of Service via ReDoS

GitPython before 3.1.59 Path Traversal via separate-git-dir

GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()

GitPython before 3.1.52 Environment Variable Exfiltration via clone_from

GitPython before 3.1.53 Config Injection via Submodule Names

GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository

GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name

GitPython 3.1.59 Local File Content Oracle via --no-index

GitPython before 3.1.59 Arbitrary File Read via TagReference.create

GitPython before 3.1.59 Arbitrary File Read via Repo.blame()

GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file

GitPython before 3.1.57 Arbitrary File Read via Repo.archive()

GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()

GitPython before 3.1.62 Path Traversal via gitmodules path

GitPython before 3.1.56 Arbitrary File Truncation via Commit.count