Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: gitpython-developers GitPython 3.1.51 Clear all filters
TI-2026-47620 CVE-2026-67324

GitPython 3.1.50 Authentication Bypass via Joined Short Options

Priority MEDIUM 48

GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00454 Published 2026-08-01 Partial fix · 3.1.51 CWE-78
TI-2026-47619 CVE-2026-67323 · GHSA-956x-8gvw-wg5v

GitPython before 3.1.51 Command Injection via unguarded Git options

Priority HIGH 72

GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via options such as --exec/--upload-pack (leading to arbi…

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.01251 Published 2026-08-01 Partial fix · 3.1.51 CWE-77