Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:gitpython_project:gitpython:*:*:*:*:*:python:*:*

2 briefs RSS
high advisory

GitPython Repository Discovery Vulnerability Leading to RCE

GitPython versions up to 3.1.59 are vulnerable to an arbitrary code execution flaw where malicious tracked repository content is misidentified as a Git directory, causing hooks to execute during standard repository operations.

GitPython remote-code-execution software-vulnerability
1t 1c
high advisory

Remote Code Execution in GitPython via Git Config Injection

GitPython versions before 3.1.59 contain a vulnerability where improper sanitization of multi-line configuration values allows attackers to inject arbitrary git directives, leading to remote code execution.

GitPython +2 vulnerability path-traversal supply-chain info-disclosure local-file-inclusion
4t 1c updated