Red Hat Security Advisory

RHSA-2026:79373

satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

Released 2026-10-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-vulnerability-engine-rhel9

Fixes 1 record

TI-2026-54689 CVE-2026-78677 · GHSA-8mcc-hrx5-hvxc

GitPython before 3.1.59 Path Traversal via separate-git-dir

HIGH 77

GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clone destination.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00651 Published 2026-08-25 Partial fix · 3.1.59 CWE-22