gitpython vulnerabilities (PyPI)
44 vulnerabilities.
-
gitpythonPyPI GitPython validates a submodule's ".git" path only after cloning into it (RCE) 7.5 High -
gitpythonPyPI GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move() 6.9 Medium -
gitpythonPyPI GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name 8.7 High -
gitpythonPyPI GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec 9.2 Critical -
gitpythonPyPI GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs 7.7 High -
gitpythonPyPI GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date 8.7 High -
gitpythonPyPI GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name 7.1 High -
gitpythonPyPI GitPython before 3.1.62 Path Traversal via gitmodules path 8.7 High -
gitpythonPyPI GitPython before 3.1.60 Denial of Service via ReDoS 8.7 High -
gitpythonPyPI GitPython 3.1.59 Local File Content Oracle via --no-index 7.1 High -
gitpythonPyPI GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation 8.7 High -
gitpythonPyPI GitPython before 3.1.59 Arbitrary File Read via TagReference.create 7.1 High -
gitpythonPyPI GitPython before 3.1.59 Arbitrary File Read via Repo.blame() 7.1 High -
gitpythonPyPI GitPython before 3.1.59 Path Traversal via separate-git-dir 8.7 High -
gitpythonPyPI GitPython before 3.1.59 Remote Code Execution via Config Injection 9.3 Critical -
gitpythonPyPI GitPython before 3.1.59 Local File Content Disclosure via .gitmodules 8.6 High -
gitpythonPyPI GitPython before 3.1.58 Command Execution via split_single_char_options 8.7 High -
gitpythonPyPI GitPython before 3.1.58 Config Injection via option-name 8.7 High -
gitpythonPyPI GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name 8.4 High -
gitpythonPyPI GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file 7.1 High -
gitpythonPyPI GitPython before 3.1.58 Remote Code Execution via Repo.init 7.7 High -
gitpythonPyPI GitPython before 3.1.58 Arbitrary File Overwrite via read-tree 7.2 High -
gitpythonPyPI GitPython before 3.1.56 Arbitrary File Truncation via Commit.count 5.3 Medium -
gitpythonPyPI GitPython before 3.1.57 Arbitrary File Read via Repo.archive() 7.1 High -
gitpythonPyPI GitPython before 3.1.57 Arbitrary File Overwrite and Read 7.2 High -
gitpythonPyPI GitPython before 3.1.50 Newline Injection via config_writer section 7.3 High -
gitpythonPyPI GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add() 8.7 High -
gitpythonPyPI GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling 8.7 High -
gitpythonPyPI GitPython before 3.1.54 Remote Code Execution via --template 7.7 High -
gitpythonPyPI GitPython before 3.1.54 Arbitrary File Overwrite via diff 7.2 High -
gitpythonPyPI GitPython before 3.1.53 Config Injection via Submodule Names 7.3 High -
gitpythonPyPI GitPython before 3.1.52 Environment Variable Exfiltration via clone_from 8.7 High -
gitpythonPyPI GitPython before 3.1.51 Command Injection via unguarded Git options 8.6 High -
gitpythonPyPI GitPython before 3.1.51 Command Injection via option prefix abbreviation 8.7 High -
gitpythonPyPI GitPython 3.1.50 Authentication Bypass via Joined Short Options 9.3 Critical -
gitpythonPyPI GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath 7.8 High -
gitpythonPyPI GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository 7.8 High -
gitpythonPyPI GitPython: Command injection via Git options bypass 8.8 High -
gitpythonPyPI GitPython: Unsafe option check validates multi_options before shlex.split transforms it 8.1 High -
gitpythonPyPI Untrusted search path under some conditions on Windows allows arbitrary code execution 7.8 High -
gitpythonPyPI GitPython blind local file inclusion 4.0 Medium -
gitpythonPyPI Untrusted search path on Windows systems leading to arbitrary code execution 7.8 High -
gitpythonPyPI GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments 9.8 Critical -
gitpythonPyPI Remote Code Execution (RCE) 8.1 High