GitHub

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack vector: More severe the more the remote (logically and ...
GitHub

GitPython vulnerable to Remote Code Execution due to improper user input validation

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack Vector: This metric reflects the context by which vulnerability ...
socradar

CVE-2026-76217 — GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-from-file and --pathspec ...
community.openai

Add gitpython and downloadable models to Code Interpreter?

Can you add gitpython to the list of installed packages in the Code Interpreter sandbox? I want to be able to upload a repo and have the AI read through the diffs, etc. Also, it tried to use SpaCy and ...
LWN.net

SUSE alert openSUSE-SU-2023:0259-1 (python-GitPython)

openSUSE Security Update: Security update for python-GitPython _____ Announcement ID: openSUSE-SU-2023:0259-1 Rating: moderate References: #1214810 Cross-References: CVE-2023-41040 ...
LWN.net

SUSE alert openSUSE-SU-2023:0271-1 (python-GitPython)

openSUSE Security Update: Security update for python-GitPython _____ Announcement ID: openSUSE-SU-2023:0271-1 Rating: moderate References: #1214810 Cross-References: CVE-2023-41040 ...