Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
Vulnerabilities
search
All ecosystems
630267
AlmaLinux
4656
Alpaquita
8936
Alpine
4052
Android
3261
Azure Linux
12016
BellSoft Hardened Containers
433
Bitnami
7001
Chainguard
5743
CleanStart
791
CRAN
14
crates.io
2241
Debian
54564
Echo
3194
GHC
3
GIT
81484
GitHub Actions
49
Go
6589
Hackage
30
Hex
57
Julia
516
Linux
15361
Mageia
5877
Maven
6327
MinimOS
26989
npm
217517
NuGet
1663
opam
12
openEuler
6511
openSUSE
12579
OSS-Fuzz
3836
Packagist
6087
Pub
11
PyPI
18703
Red Hat
19441
Rocky Linux
2951
Root
12136
RubyGems
1940
SUSE
20549
SwiftURL
50
Ubuntu
52385
VSCode
18
Wolfi
3694
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2024-4
PyPI/gitpython
github.com/gitpython-developers/GitPython
See record for full details
11 Jan 2024
Fix available
Severity - 7.8 (High)
GHSA-2mqj-m65w-jghx
PyPI/gitpython
Untrusted search path under some conditions on Windows allows arbitrary code execution
10 Jan 2024
Fix available
Severity - 8.6 (High)
PYSEC-2023-165
PyPI/gitpython
See record for full details
30 Aug 2023
Fix available
Severity - 6.5 (Medium)
GHSA-cwvm-v4w8-q58c
PyPI/gitpython
GitPython blind local file inclusion
30 Aug 2023
Fix available
Severity - 6.9 (Medium)
GHSA-wfm5-v35h-vwf4
PyPI/gitpython
GitPython untrusted search path on Windows systems leading to arbitrary code execution
29 Aug 2023
Fix available
Severity - 8.6 (High)
PYSEC-2023-161
PyPI/gitpython
See record for full details
28 Aug 2023
Fix available
Severity - 7.8 (High)
GHSA-pr76-5cm5-w9cj
PyPI/gitpython
GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments
11 Aug 2023
Fix available
Severity - 9.3 (Critical)
PYSEC-2023-137
PyPI/gitpython
github.com/gitpython-developers/GitPython
See record for full details
11 Aug 2023
Fix available
GHSA-hcpj-qp55-gfph
PyPI/gitpython
GitPython vulnerable to Remote Code Execution due to improper user input validation
06 Dec 2022
Fix available
Severity - 9.2 (Critical)
PYSEC-2022-42992
PyPI/gitpython
See record for full details
06 Dec 2022
Fix available
PyPI - OSV