TI-2026-47618 CVE-2026-67322 · GHSA-rwj8-pgh3-r573
GitPython before 3.1.52 Environment Variable Exfiltration via clone_from
Priority HIGH 77
GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from().
RHSA-2026:45785
Red Hat Hardened Images RPMs Security Update
Released 2026-07-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images swift-lang-6.3.3-0.1.1.hum1@aarch64, swift-lang-6.3.3-0.1.1.hum1@src, swift-lang-6.3.3-0.1.1.hum1@x86_64 +2
Fixes 5 records
TI-2026-47621 CVE-2026-67325 · GHSA-2f96-g7mh-g2hx
GitPython before 3.1.51 Command Injection via option prefix abbreviation
Priority HIGH 73
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature.
TI-2026-47619 CVE-2026-67323 · GHSA-956x-8gvw-wg5v
GitPython before 3.1.51 Command Injection via unguarded Git options
Priority HIGH 72
GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via options such as --exec/--upload-pack (leading to arbi…
TI-2026-31912 CVE-2026-43823
Double free in Apple swift-crypto
Priority HIGH 72
When initializing an RSA public key from DER or PEM bytes throws an error, the EVP_PKEY* is double-freed: first in the catch block, then in the deinit.
TI-2026-47622 CVE-2026-67326 · GHSA-gmvg-8p66-77hg
GitPython before 3.1.50 Newline Injection via config_writer section
Priority HIGH 67
GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config.