High

GSA_kwCzR0hTQS1tdjkzLXc3OTktY2oyd84ABWgu

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath
Ecosystems: pypi
Packages: GitPython
Source: github
Published: 6 days ago

High

GSA_kwCzR0hTQS12ODdyLTZxM2YtMmo2N84ABWWV

GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath
Ecosystems: pypi
Packages: GitPython
Source: github
Published: 8 days ago

High

GSA_kwCzR0hTQS03NTQ1LWZjeHEtN2oyNM4ABWTM

GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository
Ecosystems: pypi
Packages: GitPython
Source: github
Published: 8 days ago

High

GSA_kwCzR0hTQS1ycG01LTY1Y3ctNmhqNM4ABVyD

GitPython has Command Injection via Git options bypass
Ecosystems: pypi
Packages: GitPython
Source: github
Published: 19 days ago

High

GSA_kwCzR0hTQS14MnF4LTY5NTMtODQ4Nc4ABVyC

GitPython: Unsafe option check validates multi_options before shlex.split transformation
Ecosystems: pypi
Packages: GitPython
Source: github
Published: 19 days ago

High

GSA_kwCzR0hTQS0ybXFqLW02NXctamdoeM4AA4Vh

Untrusted search path under some conditions on Windows allows arbitrary code execution
Ecosystems: pypi
Packages: GitPython
Source: github
Published: over 2 years ago

Moderate

GSA_kwCzR0hTQS1jd3ZtLXY0dzgtcTU4Y84AA1lK

GitPython blind local file inclusion
Ecosystems: pypi
Packages: GitPython
Source: github
Published: over 2 years ago

High

GSA_kwCzR0hTQS13Zm01LXYzNWgtdndmNM4AA1jX

GitPython untrusted search path on Windows systems leading to arbitrary code execution
Ecosystems: pypi
Packages: gitpython
Source: github
Published: over 2 years ago

Critical

GSA_kwCzR0hTQS1wcjc2LTVjbTUtdzljas4AA1Py

GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments
Ecosystems: pypi
Packages: GitPython
Source: github
Published: almost 3 years ago

Critical

GSA_kwCzR0hTQS1oY3BqLXFwNTUtZ2ZwaM4AAwKi

GitPython vulnerable to Remote Code Execution due to improper user input validation
Ecosystems: pypi
Packages: GitPython
Source: github
Published: over 3 years ago

Registry	pypi.org
Source	Repository
Docs	Documentation
JSON API	View JSON
CodeMeta	codemeta.json

PURL	pkg:pypi/gitpython spec
License	BSD-3-Clause
First Release	about 16 years ago
Last Synced	about 22 hours ago

Stars	4,386 on GitHub
Forks	891 on GitHub
Docker Dependents	560
Docker Downloads	199,978,831
Commits	2907
Committers	312
Avg per Author	9.317
DDS	0.672