Skip to content
OpenAdvisories

Product · gitpython-developers

GitPython

42 known vulnerabilities.

All Critical High Medium Low Exploited only

42 results · Feed

  • Medium 4.0
    CVE-2023-41040

    GitPython blind local file inclusion

    GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn't check if …

    gitpython-developers GitPython gitpython python-git Debian Ubuntu Alpine PyPI
  • High 7.8
    CVE-2023-40590

    Untrusted search path on Windows systems leading to arbitrary code execution

    GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the `git` command, if a user runs GitPython f…

    gitpython-developers GitPython gitpython python-git Ubuntu PyPI