{"id":31202453,"number":"0.3.1-beta2","published_at":"2011-01-17T23:18:32.000Z","licenses":null,"integrity":"sha256-037f6f0900935278e915e5d23b86db55f9eb46257e11f67f3df7f9bb47c727dd","status":null,"download_url":"https://files.pythonhosted.org/packages/25/5c/c98f38389cc0e7bed3276acd6a15eff63ac02550291e9ee7dbddfbffb4e2/GitPython-0.3.1-beta2.tar.gz","registry_url":"https://pypi.org/project/gitpython/0.3.1-beta2","documentation_url":"https://gitpython.readthedocs.io/en/stable/","install_command":"pip install gitpython==0.3.1-beta2 --index-url https://pypi.org/simple","immutable":null,"metadata":{"download_url":"https://files.pythonhosted.org/packages/25/5c/c98f38389cc0e7bed3276acd6a15eff63ac02550291e9ee7dbddfbffb4e2/GitPython-0.3.1-beta2.tar.gz","requires_python":null,"yanked":false,"yanked_reason":null,"packagetype":"sdist","python_version":"source","size":305923,"has_sig":false},"created_at":"2022-04-10T11:09:03.967Z","updated_at":"2025-07-03T11:06:47.019Z","purl":"pkg:pypi/gitpython@0.3.1-beta2","related_tag":{"name":"0.3.1-beta2","sha":"5eb7fd3f0dd99dc6c49da6fd7e78a392c4ef1b33","kind":"commit","published_at":"2011-01-17T22:15:14.000Z","download_url":"https://codeload.github.com/gitpython-developers/GitPython/tar.gz/0.3.1-beta2","html_url":"https://github.com/gitpython-developers/GitPython/releases/tag/0.3.1-beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/gitpython-developers/GitPython@0.3.1-beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gitpython-developers%2FGitPython/tags/0.3.1-beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gitpython-developers%2FGitPython/tags/0.3.1-beta2/manifests","release_url":null},"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/gitpython/versions/0.3.1-beta2","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/gitpython/versions/0.3.1-beta2/codemeta","dependencies":[],"advisories":[{"uuid":"GSA_kwCzR0hTQS01OWNyLTZyM3gtNjQ0d84AB7Rg","identifiers":["GHSA-59cr-6r3x-644w"],"url":"https://github.com/advisories/GHSA-59cr-6r3x-644w","title":"GitPython submodule update path traversal can write outside the repository","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["3.1.62"]},{"uuid":"GSA_kwCzR0hTQS1nNXZ2LTlneHctODJoeM4AB7RW","identifiers":["GHSA-g5vv-9gxw-82hx","CVE-2026-87819"],"url":"https://github.com/advisories/GHSA-g5vv-9gxw-82hx","title":"GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.60"]},{"uuid":"GSA_kwCzR0hTQS0yMzlnLXdoZnEtN3hqOc4AB7RU","identifiers":["GHSA-239g-whfq-7xj9","CVE-2026-87817"],"url":"https://github.com/advisories/GHSA-239g-whfq-7xj9","title":"GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.60"]},{"uuid":"GSA_kwCzR0hTQS1xcGY1LTN3ZnctZmg3cc4ABvJK","identifiers":["GHSA-qpf5-3wfw-fh7q"],"url":"https://github.com/advisories/GHSA-qpf5-3wfw-fh7q","title":"Duplicate Advisory: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS0ycHhxLTV2Y2ctcnEyOc4ABvJp","identifiers":["GHSA-2pxq-5vcg-rq29"],"url":"https://github.com/advisories/GHSA-2pxq-5vcg-rq29","title":"Duplicate Advisory: Repository content can impersonate the git directory, leading to arbitrary code execution","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS0zd3h3LXh2MzQtMmZyZ84ABu8U","identifiers":["GHSA-3wxw-xv34-2frg","CVE-2026-78679"],"url":"https://github.com/advisories/GHSA-3wxw-xv34-2frg","title":"GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["3.1.59"]},{"uuid":"GSA_kwCzR0hTQS04bWNjLWhyeDUtaHZ4Y84ABu8T","identifiers":["GHSA-8mcc-hrx5-hvxc","CVE-2026-78677"],"url":"https://github.com/advisories/GHSA-8mcc-hrx5-hvxc","title":"GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.59"]},{"uuid":"GSA_kwCzR0hTQS01eHh4LXFoaDctOTI4N84ABu8S","identifiers":["GHSA-5xxx-qhh7-9287","CVE-2026-78678"],"url":"https://github.com/advisories/GHSA-5xxx-qhh7-9287","title":"GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["3.1.59"]},{"uuid":"GSA_kwCzR0hTQS0yODRoLW02MnEtZ2Y4d84ABu8R","identifiers":["GHSA-284h-m62q-gf8w","CVE-2026-78676"],"url":"https://github.com/advisories/GHSA-284h-m62q-gf8w","title":"GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE","severity":"CRITICAL","affected":true,"fixed":false,"fixed_versions":["3.1.59"]},{"uuid":"GSA_kwCzR0hTQS03ODMzLWZyN2otdjMycc4ABu8Q","identifiers":["GHSA-7833-fr7j-v32q","CVE-2026-78675"],"url":"https://github.com/advisories/GHSA-7833-fr7j-v32q","title":"GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.59"]},{"uuid":"GSA_kwCzR0hTQS04OWZmLW04d3YtcDk5cs4ABlQu","identifiers":["GHSA-89ff-m8wv-p99r"],"url":"https://github.com/advisories/GHSA-89ff-m8wv-p99r","title":"Duplicate Advisory: GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS02cmoyLTk2ZjUtY2hqOc4ABlQK","identifiers":["GHSA-6rj2-96f5-chj9"],"url":"https://github.com/advisories/GHSA-6rj2-96f5-chj9","title":"Duplicate Advisory: GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS05NTU3LTIzNGotN3J2Oc4ABlQo","identifiers":["GHSA-9557-234j-7rv9"],"url":"https://github.com/advisories/GHSA-9557-234j-7rv9","title":"Duplicate Advisory: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE","severity":"CRITICAL","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS1jcm1jLWY0bTctMzNmas4ABlQn","identifiers":["GHSA-crmc-f4m7-33fj"],"url":"https://github.com/advisories/GHSA-crmc-f4m7-33fj","title":"Duplicate Advisory: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS03cjM5LTZxOG0tcXc2OM4ABlQr","identifiers":["GHSA-7r39-6q8m-qw68"],"url":"https://github.com/advisories/GHSA-7r39-6q8m-qw68","title":"Duplicate Advisory: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS13NjcyLTIzOWctYzNncs4ABkyG","identifiers":["GHSA-w672-239g-c3gr"],"url":"https://github.com/advisories/GHSA-w672-239g-c3gr","title":"Duplicate Advisory: GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS13djQ2LXhwajgtcHc1M84ABkyl","identifiers":["GHSA-wv46-xpj8-pw53"],"url":"https://github.com/advisories/GHSA-wv46-xpj8-pw53","title":"Duplicate Advisory: GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS03angzLWpxY3AtaGhnY84ABkya","identifiers":["GHSA-7jx3-jqcp-hhgc"],"url":"https://github.com/advisories/GHSA-7jx3-jqcp-hhgc","title":"Duplicate Advisory: GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS0zdnJ4LTUyNnItNjRybc4ABkyN","identifiers":["GHSA-3vrx-526r-64rm"],"url":"https://github.com/advisories/GHSA-3vrx-526r-64rm","title":"Duplicate Advisory: GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS0yOThoLWpwcTQtbTY2Nc4ABkyf","identifiers":["GHSA-298h-jpq4-m665"],"url":"https://github.com/advisories/GHSA-298h-jpq4-m665","title":"Duplicate Advisory: GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS13dnBwLThoeDktcDY2as4ABhvf","identifiers":["GHSA-wvpp-8hx9-p66j","CVE-2026-76220"],"url":"https://github.com/advisories/GHSA-wvpp-8hx9-p66j","title":"GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.58"]},{"uuid":"GSA_kwCzR0hTQS1qbTc4LTlmdnYtbWhncs4ABhve","identifiers":["GHSA-jm78-9fvv-mhgr"],"url":"https://github.com/advisories/GHSA-jm78-9fvv-mhgr","title":"GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.58"]},{"uuid":"GSA_kwCzR0hTQS1obXEyLXc1OGYtMjdqY84ABhvd","identifiers":["GHSA-hmq2-w58f-27jc","CVE-2026-76222"],"url":"https://github.com/advisories/GHSA-hmq2-w58f-27jc","title":"GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.58"]},{"uuid":"GSA_kwCzR0hTQS1oaDlwLTZ3aDItNG1mY84ABhvc","identifiers":["GHSA-hh9p-6wh2-4mfc","CVE-2026-76217"],"url":"https://github.com/advisories/GHSA-hh9p-6wh2-4mfc","title":"GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["3.1.58"]},{"uuid":"GSA_kwCzR0hTQS05cmo3LXJmMnAtdzc3cs4ABhvb","identifiers":["GHSA-9rj7-rf2p-w77r","CVE-2026-76218"],"url":"https://github.com/advisories/GHSA-9rj7-rf2p-w77r","title":"GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.58"]},{"uuid":"GSA_kwCzR0hTQS00Z213LWdnMm0tdzQ2cM4ABhva","identifiers":["GHSA-4gmw-gg2m-w46p","CVE-2026-76219"],"url":"https://github.com/advisories/GHSA-4gmw-gg2m-w46p","title":"GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.58"]},{"uuid":"GSA_kwCzR0hTQS1wNTM4LWM0MzQtOHYyNM4ABhHL","identifiers":["GHSA-p538-c434-8v24"],"url":"https://github.com/advisories/GHSA-p538-c434-8v24","title":"GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["3.1.56"]},{"uuid":"GSA_kwCzR0hTQS01MzltLTl4aDYtcTZycs4ABhHJ","identifiers":["GHSA-539m-9xh6-q6rr"],"url":"https://github.com/advisories/GHSA-539m-9xh6-q6rr","title":"GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["3.1.57"]},{"uuid":"GSA_kwCzR0hTQS0zZjd3LThycjgtZjM3Zs4ABhHI","identifiers":["GHSA-3f7w-8rr8-f37f"],"url":"https://github.com/advisories/GHSA-3f7w-8rr8-f37f","title":"GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.57"]},{"uuid":"GSA_kwCzR0hTQS1tNGYzLWc0Y3EtaHFyeM4ABhCU","identifiers":["GHSA-m4f3-g4cq-hqrx"],"url":"https://github.com/advisories/GHSA-m4f3-g4cq-hqrx","title":"Duplicate Advisory: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS02cjJyLXd3MjQtN2g1Ms4ABhCc","identifiers":["GHSA-6r2r-ww24-7h52"],"url":"https://github.com/advisories/GHSA-6r2r-ww24-7h52","title":"Duplicate Advisory: GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS00dnBnLXBmajgtbTMzcc4ABhCQ","identifiers":["GHSA-4vpg-pfj8-m33q"],"url":"https://github.com/advisories/GHSA-4vpg-pfj8-m33q","title":"Duplicate Advisory: GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":[]},{"uuid":"GSA_kwCzR0hTQS05NHA0LTRjcTgtOWc2N84ABftC","identifiers":["GHSA-94p4-4cq8-9g67"],"url":"https://github.com/advisories/GHSA-94p4-4cq8-9g67","title":"GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.55"]},{"uuid":"GSA_kwCzR0hTQS1yOW1yLW0zN2MtNWZyM84ABfq5","identifiers":["GHSA-r9mr-m37c-5fr3"],"url":"https://github.com/advisories/GHSA-r9mr-m37c-5fr3","title":"GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.54"]},{"uuid":"GSA_kwCzR0hTQS02cDhoLTN3Z3gtOTdnZs4ABfq4","identifiers":["GHSA-6p8h-3wgx-97gf"],"url":"https://github.com/advisories/GHSA-6p8h-3wgx-97gf","title":"GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.54"]},{"uuid":"GSA_kwCzR0hTQS1manI0LXg2NjMtbXd4Y84ABfq3","identifiers":["GHSA-fjr4-x663-mwxc"],"url":"https://github.com/advisories/GHSA-fjr4-x663-mwxc","title":"GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.54"]},{"uuid":"GSA_kwCzR0hTQS0zcnA1LWpqbXctNHd2Ms4ABfqy","identifiers":["GHSA-3rp5-jjmw-4wv2"],"url":"https://github.com/advisories/GHSA-3rp5-jjmw-4wv2","title":"GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.53"]},{"uuid":"GSA_kwCzR0hTQS1yd2o4LXBnaDMtcjU3M84ABfLp","identifiers":["GHSA-rwj8-pgh3-r573","CVE-2026-67322"],"url":"https://github.com/advisories/GHSA-rwj8-pgh3-r573","title":"GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.52"]},{"uuid":"GSA_kwCzR0hTQS05NTZ4LThndnctd2c1ds4ABfJZ","identifiers":["GHSA-956x-8gvw-wg5v","CVE-2026-67323"],"url":"https://github.com/advisories/GHSA-956x-8gvw-wg5v","title":"GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.51"]},{"uuid":"GSA_kwCzR0hTQS0yZjk2LWc3bWgtZzJoeM4ABfJY","identifiers":["GHSA-2f96-g7mh-g2hx","CVE-2026-67325"],"url":"https://github.com/advisories/GHSA-2f96-g7mh-g2hx","title":"GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.51"]},{"uuid":"GSA_kwCzR0hTQS1tdjkzLXc3OTktY2oyd84ABWgu","identifiers":["GHSA-mv93-w799-cj2w"],"url":"https://github.com/advisories/GHSA-mv93-w799-cj2w","title":"GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.50"]},{"uuid":"GSA_kwCzR0hTQS12ODdyLTZxM2YtMmo2N84ABWWV","identifiers":["GHSA-v87r-6q3f-2j67","CVE-2026-44244"],"url":"https://github.com/advisories/GHSA-v87r-6q3f-2j67","title":"GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.49"]},{"uuid":"GSA_kwCzR0hTQS03NTQ1LWZjeHEtN2oyNM4ABWTM","identifiers":["GHSA-7545-fcxq-7j24","CVE-2026-44243"],"url":"https://github.com/advisories/GHSA-7545-fcxq-7j24","title":"GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.48"]},{"uuid":"GSA_kwCzR0hTQS14MnF4LTY5NTMtODQ4Nc4ABVyC","identifiers":["GHSA-x2qx-6953-8485","CVE-2026-42284"],"url":"https://github.com/advisories/GHSA-x2qx-6953-8485","title":"GitPython: Unsafe option check validates multi_options before shlex.split transformation","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.47"]},{"uuid":"GSA_kwCzR0hTQS0ybXFqLW02NXctamdoeM4AA4Vh","identifiers":["GHSA-2mqj-m65w-jghx","CVE-2024-22190"],"url":"https://github.com/advisories/GHSA-2mqj-m65w-jghx","title":"Untrusted search path under some conditions on Windows allows arbitrary code execution","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.41"]},{"uuid":"GSA_kwCzR0hTQS1jd3ZtLXY0dzgtcTU4Y84AA1lK","identifiers":["GHSA-cwvm-v4w8-q58c","CVE-2023-41040"],"url":"https://github.com/advisories/GHSA-cwvm-v4w8-q58c","title":"GitPython blind local file inclusion","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["3.1.37"]},{"uuid":"GSA_kwCzR0hTQS13Zm01LXYzNWgtdndmNM4AA1jX","identifiers":["GHSA-wfm5-v35h-vwf4","CVE-2023-40590"],"url":"https://github.com/advisories/GHSA-wfm5-v35h-vwf4","title":"GitPython untrusted search path on Windows systems leading to arbitrary code execution","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["3.1.33"]},{"uuid":"GSA_kwCzR0hTQS1wcjc2LTVjbTUtdzljas4AA1Py","identifiers":["GHSA-pr76-5cm5-w9cj","CVE-2023-40267"],"url":"https://github.com/advisories/GHSA-pr76-5cm5-w9cj","title":"GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments","severity":"CRITICAL","affected":true,"fixed":false,"fixed_versions":["3.1.32"]},{"uuid":"GSA_kwCzR0hTQS1oY3BqLXFwNTUtZ2ZwaM4AAwKi","identifiers":["GHSA-hcpj-qp55-gfph","CVE-2022-24439"],"url":"https://github.com/advisories/GHSA-hcpj-qp55-gfph","title":"GitPython vulnerable to Remote Code Execution due to improper user input validation","severity":"CRITICAL","affected":true,"fixed":false,"fixed_versions":["3.1.30"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/gitpython"}