Skip to content
OpenAdvisories

Package · Alpine

py3-gitpython

13 known vulnerabilities.

All Critical High Medium Low Exploited only

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-78678

    GitPython before 3.1.59 Arbitrary File Read via Repo.blame()

    GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing these options to Repo.blame(). Attackers can supply revision v…

    gitpython-developers GitPython gitpython python-git Debian Alpine PyPI
  • Medium 6.5
    CVE-2026-76217

    GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file

    GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to …

    gitpython-developers GitPython gitpython python-git Debian Ubuntu Alpine PyPI
  • Medium 4.0
    CVE-2023-41040

    GitPython blind local file inclusion

    GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn't check if …

    gitpython-developers GitPython gitpython python-git Debian Ubuntu Alpine PyPI