Skip to content
OpenAdvisories

Package · Debian

python-git

42 known vulnerabilities.

All Critical High Medium Low Exploited only

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-78676

    GitPython before 3.1.59 Remote Code Execution via Config Injection

    GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live …

    gitpython-developers GitPython gitpython python-git Debian Alpine PyPI
  • Critical 9.8
    CVE-2026-67324

    GitPython 3.1.50 Authentication Bypass via Joined Short Options

    GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate. When an application passes attacker-influenced clone options into Repo.clone_from(..., mul…

    gitpython-developers GitPython gitpython python-git Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2023-40267

    GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments

    GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

    gitpython python-git python-git Debian Ubuntu PyPI