Skip to content
OpenAdvisories

Package · Ubuntu

python-git

38 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-67324

    GitPython 3.1.50 Authentication Bypass via Joined Short Options

    GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate. When an application passes attacker-influenced clone options into Repo.clone_from(..., mul…

    gitpython-developers GitPython gitpython python-git Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2023-40267

    GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments

    GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

    gitpython python-git python-git Debian Ubuntu PyPI