GitPython vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-MV93-W799-CJ2WHighGitPython: GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch,…CVE-2026-44244HighGitPython: GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath CVE-2026-44243HighGitPython: GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and…CVE-2026-42215HighGitPython: GitPython has Command Injection via Git options bypass CVE-2026-42284HighGitPython: GitPython: Unsafe option check validates multi_options before shlex.split transformation CVE-2024-22190HighGitPython: Untrusted search path under some conditions on Windows allows arbitrary code execution CVE-2023-41040MediumGitPython: GitPython blind local file inclusion CVE-2023-40590Highgitpython: GitPython untrusted search path on Windows systems leading to arbitrary code execution CVE-2023-40267CriticalGitPython: GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments CVE-2022-24439CriticalGitPython: GitPython vulnerable to Remote Code Execution due to improper user input validation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo