GI
Product
Gitpython
35
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 24Medium 6Low 0
Watch
Add Gitpython to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78676 | 9.8 | Aug 25 | GitPython before 3.1.59 Remote Code Execution via Config Injection Affected: before 3.1.59 |
| CVE-2026-67324 | 9.8 | Aug 1 | GitPython 3.1.50 Authentication Bypass via Joined Short Options Affected: before 3.1.50 |
| CVE-2026-42284 | 9.8 | May 7 | GitPython: Unsafe option check validates multi_options before shlex.split transforms it Affected: before 3.1.47 |
| CVE-2023-40267 | 9.8 | Aug 11 | GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from Affected: before 3.1.32 |
| CVE-2022-24439 | 9.8 | Dec 6 | All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted… Affected: before 3.1.30 |
Showing 5
