TI-2026-47618 CVE-2026-67322 · GHSA-rwj8-pgh3-r573
GitPython before 3.1.52 Environment Variable Exfiltration via clone_from
Priority HIGH 77
GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from().
RHSA-2026:45940
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-07-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images clang21-21.1.8-8.hum1@aarch64, clang21-21.1.8-8.hum1@x86_64, clang21-analyzer-21.1.8-8.hum1@aarch64 +47
Fixes 4 records
TI-2026-47621 CVE-2026-67325 · GHSA-2f96-g7mh-g2hx
GitPython before 3.1.51 Command Injection via option prefix abbreviation
Priority HIGH 73
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature.
TI-2026-47619 CVE-2026-67323 · GHSA-956x-8gvw-wg5v
GitPython before 3.1.51 Command Injection via unguarded Git options
Priority HIGH 72
GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via options such as --exec/--upload-pack (leading to arbi…
TI-2026-47622 CVE-2026-67326 · GHSA-gmvg-8p66-77hg
GitPython before 3.1.50 Newline Injection via config_writer section
Priority HIGH 67
GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config.