Skip to main content

Gitpython Project

5 CVEs vendor

Monthly

CVE-2024-22190 Jan 11, 02:15 PyPI HIGH POC PATCH This Month

GitPython is a python library used to interact with Git repositories. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Windows Python Information Disclosure Microsoft Gitpython +1
NVD GitHub
CVSS 3.1
7.8
EPSS
0.4%
CVE-2023-41040 Aug 30, 22:15 PyPI MEDIUM POC PATCH This Month

GitPython is a python library used to interact with Git repositories. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Python Path Traversal Gitpython Gitpython Project
NVD GitHub
CVSS 3.1
6.5
EPSS
1.0%
CVE-2023-40590 Aug 28, 18:15 PyPI HIGH POC PATCH This Week

GitPython is a python library used to interact with Git repositories. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Python Information Disclosure Microsoft Gitpython Gitpython Project
NVD GitHub
CVSS 3.1
7.8
EPSS
0.5%
CVE-2023-40267 Aug 11, 07:15 PyPI CRITICAL PATCH Act Now

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Gitpython Gitpython Project
NVD GitHub
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-24439 Dec 06, 05:15 PyPI CRITICAL POC PATCH Act Now

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Debian Debian Linux Fedora Gitpython +2
NVD GitHub
CVSS 3.1
9.8
EPSS
5.4%
EPSS 0% CVSS 7.8
HIGH POC PATCH This Month

GitPython is a python library used to interact with Git repositories. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Windows Python Information Disclosure +3
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM POC PATCH This Month

GitPython is a python library used to interact with Git repositories. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Python Path Traversal +2
NVD GitHub
EPSS 0% CVSS 7.8
HIGH POC PATCH This Week

GitPython is a python library used to interact with Git repositories. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Python Information Disclosure Microsoft +2
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Gitpython Gitpython Project
NVD GitHub
EPSS 5% CVSS 9.8
CRITICAL POC PATCH Act Now

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Debian Debian Linux +4
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy