Known Vulnerabilities for products from Gitpython Project
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Gitpython Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-87819 json | GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processe... | Not Provided | 2026-09-09 | 2026-09-18 |
| CVE-2026-87818 json | GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary fil... | Not Provided | 2026-09-09 | 2026-09-16 |
| CVE-2026-87817 json | GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git dire... | Not Provided | 2026-09-09 | 2026-09-16 |
| CVE-2026-78678 json | GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --content... | Not Provided | 2026-08-25 | 2026-09-02 |
| CVE-2026-78677 json | GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git di... | Not Provided | 2026-08-25 | 2026-09-02 |
| CVE-2026-78676 json | GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant... | Not Provided | 2026-08-25 | 2026-09-02 |
| CVE-2026-78675 json | GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing attackers to disclose local file c... | Not Provided | 2026-08-25 | 2026-09-02 |
| CVE-2026-76222 json | GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositori... | Not Provided | 2026-08-19 | 2026-09-02 |
| CVE-2026-76221 json | GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to ... | Not Provided | 2026-08-19 | 2026-09-02 |
| CVE-2026-76220 json | GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by ... | Not Provided | 2026-08-19 | 2026-09-03 |
| CVE-2026-76219 json | GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.from_tree, IndexFile.reset, a... | Not Provided | 2026-08-19 | 2026-09-03 |
| CVE-2026-76218 json | GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without ... | Not Provided | 2026-08-19 | 2026-09-03 |
| CVE-2026-76217 json | GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() an... | Not Provided | 2026-08-19 | 2026-09-03 |
| CVE-2026-73625 json | GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be ... | Not Provided | 2026-08-13 | 2026-09-03 |
| CVE-2026-73624 json | GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to ... | Not Provided | 2026-08-13 | 2026-09-28 |
| CVE-2026-73623 json | GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers... | Not Provided | 2026-08-13 | 2026-09-03 |
| CVE-2026-73622 json | GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, ... | Not Provided | 2026-08-13 | 2026-09-03 |
| CVE-2026-73621 json | GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arg... | Not Provided | 2026-08-13 | 2026-09-03 |
| CVE-2026-73620 json | GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing atta... | Not Provided | 2026-08-13 | 2026-09-03 |
| CVE-2026-73619 json | GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --a... | Not Provided | 2026-08-13 | 2026-09-03 |