Search CVE reports


Toggle filters

11 – 15 of 15 results


CVE-2024-22190

Medium priority
Ignored

GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs...

1 affected package

python-git

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python-git Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2023-41040

Medium priority

Some fixes available 4 of 8

GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the...

1 affected package

python-git

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python-git Not affected Not affected Fixed Fixed Fixed
Show less packages

CVE-2023-40590

Negligible priority
Ignored

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the...

1 affected package

python-git

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python-git Ignored Ignored Ignored
Show less packages

CVE-2023-40267

Medium priority

Some fixes available 6 of 12

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

1 affected package

python-git

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python-git Needs evaluation Needs evaluation Fixed Fixed Fixed
Show less packages

CVE-2022-24439

Medium priority

Some fixes available 6 of 10

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this...

2 affected packages

gitpython, python-git

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gitpython Not in release Not in release Not in release
python-git Not affected Not affected Fixed Fixed Fixed
Show less packages