gitpython vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-RWJ8-PGH3-R573Highgitpython: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URLGHSA-956X-8GVW-WG5VHighGitPython: GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via…GHSA-2F96-G7MH-G2HXHighGitPython: GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklistGHSA-V396-V7Q4-X2QJHighGitPython: GitPython unsafe clone option gate bypass through joined short optionsGHSA-MV93-W799-CJ2WHighGitPython: GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPathCVE-2026-44244HighGitPython: GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPathCVE-2026-44243HighGitPython: GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repositoryCVE-2026-42215HighGitPython: GitPython has Command Injection via Git options bypassCVE-2026-42284HighGitPython: GitPython: Unsafe option check validates multi_options before shlex.split transformationCVE-2024-22190HighGitPython: Untrusted search path under some conditions on Windows allows arbitrary code executionCVE-2023-41040MediumGitPython: GitPython blind local file inclusionCVE-2023-40590Highgitpython: GitPython untrusted search path on Windows systems leading to arbitrary code executionCVE-2023-40267CriticalGitPython: GitPython vulnerable to remote code execution due to insufficient sanitization of input argumentsCVE-2022-24439CriticalGitPython: GitPython vulnerable to Remote Code Execution due to improper user input validation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo