| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-87819 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.60 contains a regular expression denial of servic ... |
| CVE-2026-87818 | vulnerable | vulnerable | fixed | fixed | GitPython 3.1.59 fails to restrict the --no-index option in the high-l ... |
| CVE-2026-87817 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.60 fails to properly validate the git directory l ... |
| CVE-2026-78679 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.59 contains an arbitrary file read vulnerability ... |
| CVE-2026-78678 | vulnerable | vulnerable | fixed | fixed | GitPython versions before 3.1.59 contain an incomplete denylist in the ... |
| CVE-2026-78677 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone ... |
| CVE-2026-78676 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.59 fails to safely re-serialize multi-line git-co ... |
| CVE-2026-78675 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.59 fails to disable merge_includes when parsing . ... |
| CVE-2026-76222 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.58 fails to validate submodule names from .gitmod ... |
| CVE-2026-76221 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.58 contains a config-name injection vulnerability ... |
| CVE-2026-76220 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.58 contains a command execution vulnerability in ... |
| CVE-2026-76219 | vulnerable | vulnerable | fixed | fixed | GitPython versions before 3.1.58 contain an arbitrary file overwrite v ... |
| CVE-2026-76218 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.58 contains a remote code execution vulnerability ... |
| CVE-2026-76217 | vulnerable | vulnerable | fixed | fixed | GitPython versions before 3.1.58 fail to validate options passed to gi ... |
| CVE-2026-73625 | vulnerable | vulnerable | fixed | fixed | GitPython versions before 3.1.54 contain a remote code execution vulne ... |
| CVE-2026-73624 | vulnerable | vulnerable | fixed | fixed | GitPython versions before 3.1.54 contain an arbitrary file overwrite v ... |
| CVE-2026-73623 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_ ... |
| CVE-2026-73622 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.55 fails to disable environment variable expansio ... |
| CVE-2026-73621 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.56 contains an argument injection vulnerability i ... |
| CVE-2026-73620 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.57 fails to guard git option forwarding in IndexF ... |
| CVE-2026-73619 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.57 contains an incomplete denylist in the unsafe_ ... |
| CVE-2026-69097 | vulnerable | vulnerable (no DSA) | fixed | fixed | GitPython before 3.1.53 fails to properly escape section names in git ... |
| CVE-2026-67326 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.50 fails to validate newline characters in the se ... |
| CVE-2026-67325 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.51 contains an incomplete command injection block ... |
| CVE-2026-67324 | vulnerable | vulnerable | fixed | fixed | GitPython 3.1.50 fails to recognize joined short-option forms such as ... |
| CVE-2026-67323 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.51 fails to guard against dangerous Git options p ... |
| CVE-2026-67322 | vulnerable | vulnerable | fixed | fixed | GitPython before 3.1.52 is vulnerable to environment-variable exfiltra ... |
| CVE-2026-44244 | vulnerable | vulnerable (no DSA) | fixed | fixed | GitPython is a python library used to interact with Git repositories. ... |
| CVE-2026-44243 | vulnerable | vulnerable (no DSA) | fixed | fixed | GitPython is a python library used to interact with Git repositories. ... |
| CVE-2026-42284 | vulnerable | vulnerable (no DSA) | fixed | fixed | GitPython is a python library used to interact with Git repositories. ... |
| CVE-2026-42215 | vulnerable | vulnerable (no DSA) | fixed | fixed | GitPython is a python library used to interact with Git repositories. ... |