Gitpython-developers vulnerabilities
42 CVEs and advisories name Gitpython-developers as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-67326GitPython before 3.1.50 Newline Injection via config_writer section
- CVE-2026-67324GitPython 3.1.50 Authentication Bypass via Joined Short Options
- CVE-2026-67323GitPython before 3.1.51 Command Injection via unguarded Git options
- CVE-2026-67322GitPython before 3.1.52 Environment Variable Exfiltration via clone_from
- CVE-2026-67325GitPython before 3.1.51 Command Injection via option prefix abbreviation
- CVE-2026-44243GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository
- CVE-2026-44244GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath
- CVE-2026-42284GitPython: Unsafe option check validates multi_options before shlex.split transforms it
- CVE-2026-42215GitPython: Command injection via Git options bypass
- CVE-2024-22190Untrusted search path under some conditions on Windows allows arbitrary code execution
- CVE-2023-41040GitPython blind local file inclusion
- CVE-2023-40590Untrusted search path on Windows systems leading to arbitrary code execution