RHSA-2026:67279

GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references.

GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from().

sqlparse is a non-validating SQL parser module for Python.

GitPython is a python library used to interact with Git repositories.

GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature.

GitPython is a python library used to interact with Git repositories.

The brace-expansion library generates arbitrary strings containing a common prefix and suffix.

GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via options such as --exec/--upload-pack (leading to arbi…

sqlparse is a non-validating SQL parser module for Python.

GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations.

lxml is a library for processing XML and HTML in the Python language.

GitPython is a python library used to interact with Git repositories.

GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs.

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs.

GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard.

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.

sqlparse is a non-validating SQL parser module for Python.

A flaw was found in the AAP Controller's HashiCorp Vault credential plugin.

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.

GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values.

js-yaml is a JavaScript YAML parser and dumper.

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.

fast-uri is a URI parser for Node.js.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

fast-uri is a URI parser for Node.js.

fast-uri is a URI parser for Node.js.

fast-uri is a URI parser for Node.js.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

A container privilege escalation flaw was found in certain Ansible Automation Platform images.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.