Known Vulnerabilities for Repo by Onlook
Listed below are 10 of the newest known vulnerabilities associated with "Repo" by "Onlook".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73619 json | GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --a... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-73035 json | npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that a... | Not Provided | 2026-08-10 | 2026-08-11 |
| CVE-2026-72567 json | An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote a... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-67324 json | GitPython 3.1.50 fails to recognize joined short-option forms such as -u |
Not Provided | 2026-08-01 | 2026-08-05 |
| CVE-2026-67323 json | GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls... | Not Provided | 2026-08-01 | 2026-08-05 |
| CVE-2026-67322 json | GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). The caller-supplied remote U... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-66838 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex al... | Not Provided | 2026-08-07 | 2026-08-07 |
| CVE-2026-66065 json | Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to const... | Not Provided | 2026-08-03 | 2026-08-05 |
| CVE-2026-64655 json | GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Sub... | Not Provided | 2026-08-06 | 2026-08-08 |
| CVE-2026-62185 json | Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-s... | Not Provided | 2026-07-13 | 2026-07-14 |