Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Gitpython HIGH 7.8
CVE-2026-44244

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's …

Fix: 3.1.49+
Fix from $1,950 2026-05-07
Gitpython HIGH 7.1
CVE-2026-44243

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can …

Fix: 3.1.48+
Fix from $1,950 2026-05-07
Gitpython CRITICAL 9.8
CVE-2026-42284

GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list,…

Fix: 3.1.47+
Fix from $2,300 2026-05-07
Gitpython HIGH 8.8
CVE-2026-42215

GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git op…

Fix: 3.1.47+
Fix from $1,950 2026-05-07
Gitpython HIGH 7.8
CVE-2024-22190

GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an un…

Fix: 3.1.41+
Fix from $1,950 2024-01-11
Gitpython MEDIUM 6.5
CVE-2023-41040

GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` …

Fix: after 3.1.34
Fix from $1,600 2023-08-30
Gitpython HIGH 7.8
CVE-2023-40590

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory…

Fix: after 3.1.32
Fix from $1,950 2023-08-28
Gitpython CRITICAL 9.8
CVE-2023-40267

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for C…

Fix: 3.1.32+
Fix from $2,300 2023-08-11
Gitpython CRITICAL 9.8
CVE-2022-24439EPSS 5%

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inj…

Fix: 3.1.30+
Fix from $2,300 2022-12-06