Browse CVEs

HIGH 7.8 CVE-2026-44244 GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's … Gitpython 3.1.49+ Fix from $1,9502026-05-07 HIGH 7.1 CVE-2026-44243 GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can … Gitpython 3.1.48+ Fix from $1,9502026-05-07 CRITICAL 9.8 CVE-2026-42284 GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list,… Gitpython 3.1.47+ Fix from $2,3002026-05-07 HIGH 8.8 CVE-2026-42215 GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git op… Gitpython 3.1.47+ Fix from $1,9502026-05-07 HIGH 7.8 CVE-2024-22190 GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an un… Gitpython 3.1.41+ Fix from $1,9502024-01-11 MEDIUM 6.5 CVE-2023-41040 GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` … Gitpython after 3.1.34 Fix from $1,6002023-08-30 HIGH 7.8 CVE-2023-40590 GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory… Gitpython after 3.1.32 Fix from $1,9502023-08-28 CRITICAL 9.8 CVE-2023-40267 GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for C… Gitpython 3.1.32+ Fix from $2,3002023-08-11 CRITICAL 9.8 CVE-2022-24439EPSS 5% All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inj… Gitpython 3.1.30+ Fix from $2,3002022-12-06