Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: gitpython-developers GitPython 3.1.54 Clear all filters
TI-2026-51709 CVE-2026-73625 · GHSA-pjjh-f8rp-rjv3

GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling

Priority MEDIUM 41

GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00676 Published 2026-08-13 Partial fix · 3.1.54 CWE-78
TI-2026-51708 CVE-2026-73624 · GHSA-6cm2-456v-hrq7

GitPython before 3.1.54 Arbitrary File Overwrite via diff

Priority HIGH 67

GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00553 Published 2026-08-13 Partial fix · 3.1.54 CWE-88
TI-2026-51707 CVE-2026-73623 · GHSA-2726-phmx-rc26

GitPython before 3.1.54 Remote Code Execution via --template

Priority HIGH 69

GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00961 Published 2026-08-13 Partial fix · 3.1.54 CWE-78