GitPython vulnerabilities
We track 1 vulnerability in GitPython products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 6, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest GitPython vulnerabilities
- 9.8 Critical severity
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to…
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because