Medium
CVE-2026-73619
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 38
Reset filters
High
CVE-2026-69097
GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)
High
CVE-2026-67326
GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath
High
CVE-2026-67324
GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate. When an application passes atta
Medium
CVE-2026-27735
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
High
CVE-2026-44244
GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath
High
CVE-2026-44243
GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository
High
CVE-2026-42215
GitPython has Command Injection via Git options bypass
High
CVE-2026-42284
GitPython: Unsafe option check validates multi_options before shlex.split transformation
High
CVE-2024-22190
Untrusted search path under some conditions on Windows allows arbitrary code execution
Medium
CVE-2023-41040
GitPython blind local file inclusion
High
CVE-2023-40590
GitPython untrusted search path on Windows systems leading to arbitrary code execution
Critical
CVE-2023-40267
GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments
Critical
CVE-2022-24439
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.