Read the docs
Red Hat Security Advisory

RHSA-2026:63385

Satellite 6.19.4 Async Update

Released 2026-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 22 records

TI-2026-51706 CVE-2026-73622 · GHSA-9rmj-fh79-gf6w

GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()

Priority HIGH 77

GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00514 Published 2026-08-13 Partial fix · 3.1.55 CWE-200
TI-2026-48269 CVE-2026-68494 · GHSA-r7wm-3cxj-wff9

Resource allocation without limits in FasterXML jackson-core

Priority HIGH 77

The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00463 Published 2026-08-04 Partial fix · 2.18.8, 2.21.4 +1 CWE-770
TI-2026-30536 CVE-2026-42215 · GHSA-rpm5-65cw-6hj4

GitPython: Command injection via Git options bypass

Priority HIGH 73

GitPython is a python library used to interact with Git repositories.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00749 Published 2026-05-07 Partial fix · 3.1.47 CWE-78
TI-2026-53327 CVE-2026-76222 · GHSA-hmq2-w58f-27jc

GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name

Priority HIGH 70

GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory.

CVSS 4.0HIGH 8.4 Network No auth User interaction EPSS 0.00422 Published 2026-08-19 Partial fix · 3.1.58 CWE-22
TI-2026-51707 CVE-2026-73623 · GHSA-2726-phmx-rc26

GitPython before 3.1.54 Remote Code Execution via --template

Priority HIGH 69

GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00961 Published 2026-08-13 Partial fix · 3.1.54 CWE-78
TI-2026-51708 CVE-2026-73624 · GHSA-6cm2-456v-hrq7

GitPython before 3.1.54 Arbitrary File Overwrite via diff

Priority HIGH 67

GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00553 Published 2026-08-13 Partial fix · 3.1.54 CWE-88
TI-2026-51704 CVE-2026-73620 · GHSA-mhfq-f35q-x62m

GitPython before 3.1.57 Arbitrary File Overwrite and Read

Priority HIGH 67

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00574 Published 2026-08-13 Partial fix · 3.1.57 CWE-22
TI-2026-33154 CVE-2026-45363 · GHSA-c32j-vqhx-rx3x

`jwt` (Ruby gem) - empty-key HMAC bypass

Priority MEDIUM 47

ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00364 Published 2026-07-14 Partial fix · 2.10.3, 3.2.0 CWE-1391
TI-2026-51709 CVE-2026-73625 · GHSA-pjjh-f8rp-rjv3

GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling

Priority MEDIUM 41

GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00676 Published 2026-08-13 Partial fix · 3.1.54 CWE-78
TI-2026-53326 CVE-2026-76221 · GHSA-78pq-g4m8-fx2c

GitPython before 3.1.58 Config Injection via option-name

Priority MEDIUM 40

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace i…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00485 Published 2026-08-19 Partial fix · 3.1.58 CWE-74
TI-2026-53325 CVE-2026-76220 · GHSA-wvpp-8hx9-p66j

GitPython before 3.1.58 Command Execution via split_single_char_options

Priority MEDIUM 40

GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0059 Published 2026-08-19 Partial fix · 3.1.58 CWE-88
TI-2026-53323 CVE-2026-76218 · GHSA-9rj7-rf2p-w77r

GitPython before 3.1.58 Remote Code Execution via Repo.init

Priority LOW 37

GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.0072 Published 2026-08-19 Partial fix · 3.1.58 CWE-88
TI-2026-08808 CVE-2026-10051 · GHSA-f4v5-65jj-pcr2

Information disclosure in Eclipse Jetty

Priority LOW 37

In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the same connection.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00429 Published 2026-07-14 Partial fix · 12.0.36, 12.1.10 CWE-200
TI-2026-53324 CVE-2026-76219 · GHSA-4gmw-gg2m-w46p

GitPython before 3.1.58 Arbitrary File Overwrite via read-tree

Priority LOW 34

GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree methods that append caller-influenced treeish strings to git read-tree…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00543 Published 2026-08-19 Partial fix · 3.1.58 CWE-88