GitHub

GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack vector: More severe the more the remote (logically and ...
GitHub

GitPython vulnerable to Remote Code Execution due to improper user input validation

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack Vector: This metric reflects the context by which vulnerability ...
socradar

CVE-2026-76217 — GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-from-file and --pathspec ...
habr

Нетривиальное слияние репозиториев с помощью GitPython

Дано: проект на основе OpenWRT (а он — на основе BuildRoot) с одним дополнительным репозиторием, подключенным как feed. Задача: слить дополнительный ...
blog.csdn

GitPython子模块管理终极指南：添加、更新和配置详解

【免费下载链接】GitPython GitPython is a python library used to interact with Git repositories. 项目地址: https://gitcode.com/gh_mirrors/gi/GitPython ...
Security-next.com

「GitPython」に深刻な脆弱性 - アップデートで修正

「Python」より「Git」の操作を行えるライブラリ「GitPython」に脆弱性が明らかとなった。アップデートにて修正されている。 「clone」「clone_from」において安全ではない非マルチオプションを ...