GitPython before 3.1.59 Remote Code Execution via Config Injection

GitPython 3.1.50 Authentication Bypass via Joined Short Options

GitPython: Unsafe option check validates multi_options before shlex.split transforms it

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted…

GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

GitPython before 3.1.58 Config Injection via option-name

GitPython before 3.1.58 Command Execution via split_single_char_options

GitPython before 3.1.58 Remote Code Execution via Repo.init

GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling

GitPython before 3.1.54 Remote Code Execution via --template

GitPython before 3.1.51 Command Injection via option prefix abbreviation

GitPython: Command injection via Git options bypass

GitPython before 3.1.51 Command Injection via unguarded Git options

GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name

GitPython before 3.1.58 Arbitrary File Overwrite via read-tree

GitPython before 3.1.54 Arbitrary File Overwrite via diff

GitPython before 3.1.57 Arbitrary File Overwrite and Read

GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.50 Newline Injection via config_writer section

GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath

GitPython is a python library used to interact with Git repositories

GitPython is a python library used to interact with Git repositories

GitPython before 3.1.60 Denial of Service via ReDoS

GitPython before 3.1.59 Path Traversal via separate-git-dir

GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()

GitPython before 3.1.52 Environment Variable Exfiltration via clone_from

GitPython before 3.1.53 Config Injection via Submodule Names

GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository

GitPython 3.1.59 Local File Content Oracle via --no-index

GitPython before 3.1.59 Arbitrary File Read via Repo.blame()

GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file

GitPython before 3.1.57 Arbitrary File Read via Repo.archive()

GitPython is a python library used to interact with Git repositories

GitPython before 3.1.56 Arbitrary File Truncation via Commit.count