Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

gitpython

44 known vulnerabilities (3 critical, 37 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
3.2.1 (Oct 14, 2026): no advisory affects it
Newest unaffected release
3.2.1 (Oct 14, 2026), the latest release
Advisories
44 · 3 critical, 37 high, 3 medium
Weekly downloads
34.4M
Dependents
9,300
Releases
116 since 0.1.7 (Mar 21, 2010)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Show all 44 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 44

  • GitPython validates a submodule's ".git" path only after cloning into it (RCE)

    Affected: fixed in 3.2.1.

    Fixed in 3.2.1 (released Oct 14, 2026, 7 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • CVE-2026-110860Medium 6.9

    GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()

    Affected: fixed in 3.2.0.

    Fixed in 3.2.0 (released Sep 30, 2026, 14 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name

    Affected: fixed in 3.2.0.

    Fixed in 3.2.0 (released Sep 30, 2026, 14 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • CVE-2026-110858Critical 9.2

    GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec

    Affected: from 3.1.30, fixed in 3.2.0.

    Fixed in 3.2.0 (released Sep 30, 2026, 14 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs

    Affected: fixed in 3.2.0.

    Fixed in 3.2.0 (released Sep 30, 2026, 14 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date

    Affected: fixed in 3.2.0.

    Fixed in 3.2.0 (released Sep 30, 2026, 14 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name

    Affected: fixed in 3.2.0.

    Fixed in 3.2.0 (released Sep 30, 2026, 14 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.62 Path Traversal via gitmodules path

    Affected: fixed in 3.1.62.

    Fixed in 3.1.62 (released Sep 7, 2026, 19 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.60 Denial of Service via ReDoS

    Affected: fixed in 3.1.60.

    Fixed in 3.1.60 (released Aug 25, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython 3.1.59 Local File Content Oracle via --no-index

    Affected: from 3.1.59, fixed in 3.1.60.

    Fixed in 3.1.60 (released Aug 25, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

    Affected: fixed in 3.1.60.

    Fixed in 3.1.60 (released Aug 25, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.59 Arbitrary File Read via TagReference.create

    Affected: fixed in 3.1.59.

    Fixed in 3.1.59 (released Aug 10, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.59 Arbitrary File Read via Repo.blame()

    Affected: fixed in 3.1.59.

    Fixed in 3.1.59 (released Aug 10, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.59 Path Traversal via separate-git-dir

    Affected: fixed in 3.1.59.

    Fixed in 3.1.59 (released Aug 10, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • CVE-2026-78676Critical 9.3

    GitPython before 3.1.59 Remote Code Execution via Config Injection

    Affected: fixed in 3.1.59.

    Fixed in 3.1.59 (released Aug 10, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

Show all 44 advisoriesShow fewer advisories

  • GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

    Affected: fixed in 3.1.59.

    Fixed in 3.1.59 (released Aug 10, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name

    Affected: fixed in 3.1.58.

    Fixed in 3.1.58 (released Aug 4, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.58 Config Injection via option-name

    Affected: fixed in 3.1.58.

    Fixed in 3.1.58 (released Aug 4, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.58 Command Execution via split_single_char_options

    Affected: fixed in 3.1.58.

    Fixed in 3.1.58 (released Aug 4, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.58 Arbitrary File Overwrite via read-tree

    Affected: fixed in 3.1.58.

    Fixed in 3.1.58 (released Aug 4, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.58 Remote Code Execution via Repo.init

    Affected: fixed in 3.1.58.

    Fixed in 3.1.58 (released Aug 4, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file

    Affected: fixed in 3.1.58.

    Fixed in 3.1.58 (released Aug 4, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling

    Affected: fixed in 3.1.54.

    Fixed in 3.1.54 (released Jul 22, 2026, 22 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.54 Arbitrary File Overwrite via diff

    Affected: fixed in 3.1.54.

    Fixed in 3.1.54 (released Jul 22, 2026, 22 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.54 Remote Code Execution via --template

    Affected: fixed in 3.1.54.

    Fixed in 3.1.54 (released Jul 22, 2026, 22 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()

    Affected: fixed in 3.1.55.

    Fixed in 3.1.55 (released Jul 23, 2026, 21 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • CVE-2026-73621Medium 5.3

    GitPython before 3.1.56 Arbitrary File Truncation via Commit.count

    Affected: fixed in 3.1.56.

    Fixed in 3.1.56 (released Jul 25, 2026, 19 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.57 Arbitrary File Overwrite and Read

    Affected: fixed in 3.1.57.

    Fixed in 3.1.57 (released Jul 26, 2026, 18 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.57 Arbitrary File Read via Repo.archive()

    Affected: fixed in 3.1.57.

    Fixed in 3.1.57 (released Jul 26, 2026, 18 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.53 Config Injection via Submodule Names

    Affected: fixed in 3.1.53.

    Fixed in 3.1.53 (released Jul 20, 2026, 14 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.50 Newline Injection via config_writer section

    Affected: fixed in 3.1.50.

    Fixed in 3.1.50 (released May 6, 2026, 87 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • CVE-2026-67324Critical 9.3

    GitPython 3.1.50 Authentication Bypass via Joined Short Options

    Affected: from 3.1.50, fixed in 3.1.51.

    Fixed in 3.1.51 (released Jul 12, 2026, 20 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.51 Command Injection via unguarded Git options

    Affected: fixed in 3.1.51.

    Fixed in 3.1.51 (released Jul 12, 2026, 20 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.52 Environment Variable Exfiltration via clone_from

    Affected: fixed in 3.1.52.

    Fixed in 3.1.52 (released Jul 16, 2026, 16 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.51 Command Injection via option prefix abbreviation

    Affected: fixed in 3.1.51.

    Fixed in 3.1.51 (released Jul 12, 2026, 20 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository

    Affected: fixed in 3.1.48.

    Fixed in 3.1.48 (released Apr 28, 2026, 9 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath

    Affected: fixed in 3.1.49.

    Fixed in 3.1.49 (released Apr 29, 2026, 8 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython: Unsafe option check validates multi_options before shlex.split transforms it

    Affected: fixed in 3.1.47.

    Fixed in 3.1.47 (released Apr 22, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython: Command injection via Git options bypass

    Affected: from 3.1.30, fixed in 3.1.47.

    Fixed in 3.1.47 (released Apr 22, 2026, 15 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • Untrusted search path under some conditions on Windows allows arbitrary code execution

    Affected: fixed in 3.1.41.

    Fixed in 3.1.41 (released Jan 10, 2024, 1 day before disclosure).

    The latest release, 3.2.1, is not affected.

  • CVE-2023-41040Medium 4.0

    GitPython blind local file inclusion

    Affected: fixed in 3.1.35; fixed in 3.1.37.

    Fixed in 3.1.37 (released Sep 22, 2023, 23 days after disclosure).

    The latest release, 3.2.1, is not affected.

  • Untrusted search path on Windows systems leading to arbitrary code execution

    Affected: fixed in 3.1.33.

    Fixed in 3.1.33 (released Sep 1, 2023, 4 days after disclosure).

    The latest release, 3.2.1, is not affected.

  • GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from.

    Affected: fixed in 3.1.32.

    Fixed in 3.1.32 (released Jul 10, 2023, 32 days before disclosure).

    The latest release, 3.2.1, is not affected.

  • Remote Code Execution (RCE)

    Affected: fixed in 3.1.30.

    Fixed in 3.1.30 (released Dec 29, 2022, 17 days after disclosure).

    The latest release, 3.2.1, is not affected.