GitPython CVE-2026-76220

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, w

GitPython is a python library used to interact with Git repositories. Rated high severity (CVSS 7.8), this vulnerability

GitPython is a python library used to interact with Git repositories. Rated medium severity (CVSS 6.5), this vulnerabili

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. Rated critical severity (CVSS

Arbitrary code execution in GitPython before 3.1.59 arises from unsafe re-serialization of multi-line, quoted git-config

Command execution in GitPython 3.1.50 arises because its default unsafe-option gate fails to recognize joined short-opti

Command injection in GitPython before 3.1.51 allows low-privileged attackers to bypass the `check_unsafe_options` blockl

Command injection and arbitrary file overwrite in GitPython before 3.1.51 expose applications that pass attacker-control

Remote code execution in GitPython before 3.1.54 exploits a guard bypass in check_unsafe_options where the validation lo

Arbitrary directory creation and potential hook-based code execution in GitPython affects all releases before 3.1.59. Th

Config-name injection in GitPython <= 3.1.57 enables arbitrary git-config directive forgery and remote code execution vi

Environment variable exfiltration in GitPython before 3.1.52 allows any attacker who controls a URL passed to `Repo.clon