Known Vulnerabilities for GitPython by Gitpython-developers
Listed below are 10 of the newest known vulnerabilities associated with "GitPython" by "Gitpython-developers".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110860 json | GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only l... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-110859 json | GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to read a... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-110858 json | GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option guard ... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-110857 json | GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_re... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-110856 json | GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by p... | Not Provided | 2026-10-14 | 2026-10-20 |
| CVE-2026-110855 json | GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environm... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-100689 json | GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules. ... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-87819 json | GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processe... | Not Provided | 2026-09-09 | 2026-09-18 |
| CVE-2026-87818 json | GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary fil... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-87817 json | GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git dire... | Not Provided | 2026-09-09 | 2026-09-10 |