Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:gitpython_project:gitpython:*:*:*:*:*:python:*:*

1 brief RSS
high advisory

Remote Code Execution in GitPython via Git Config Injection

GitPython versions before 3.1.59 contain a vulnerability where improper sanitization of multi-line configuration values allows attackers to inject arbitrary git directives, leading to remote code execution.

GitPython +2 vulnerability path-traversal supply-chain info-disclosure local-file-inclusion
4t 1c updated