Gitpython-developers

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 28
    Known Exploited: 0
    1
    Critical Level Threats
    19
    High Level Threats
    8
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-114145

    GitPython validates a submodule's ".git" path only after cloning into it (RCE)

    Last Modified: Oct 23, 2026
    Published: Oct 21, 2026

    CVE-2026-110860

    GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()

    Last Modified: Oct 26, 2026
    Published: Oct 14, 2026

    CVE-2026-110859

    GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name

    Last Modified: Oct 17, 2026
    Published: Oct 14, 2026

    CVE-2026-110858

    GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec

    Last Modified: Oct 17, 2026
    Published: Oct 14, 2026

    CVE-2026-110857

    GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs

    Last Modified: Oct 17, 2026
    Published: Oct 14, 2026
    Items Per Page
    Gitpython-Developers Vulnerabilities & Security CVEs | CVE-DB