Security
فارسی
All products

Red Hat Ansible Automation Platform 2/python3.12-gitpython

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
GitPython validates a submodule's ".git" path only after cloning into it (RCE)CVE-2026-114145 · GHSA-83VG-56QC-22M7 gitpythonExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracleCVE-2026-87818 · GHSA-WHH4-5Q6C-9V3X gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-25/hub-rhel8 PyPIRed Hat Medium Fix reported
GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)CVE-2026-78675 · GHSA-7833-FR7J-V32QVersion ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()CVE-2026-73619 · GHSA-539M-9XH6-Q6RRVersion ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()CVE-2026-76217 · GHSA-HH9P-6WH2-4MFCVersion ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()CVE-2026-78678 · GHSA-5XXX-QHH7-9287Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
GitPython: GitPython: Directory traversal via untrusted submodule pathCVE-2026-100689 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Migration Toolkit for Applications 8/mta/mta-solution-server-rhel9 Red Hat Medium No fix reported
GitPython: GitPython: Information disclosure via environment variable expansion in submodule namesCVE-2026-110855 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaiis/vllm-cpu-rhel9 Red Hat Medium No fix reported
GitPython: GitPython: Denial of Service via regular expression backtracking in date parsingCVE-2026-110856 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat High No fix reported
GitPython: GitPython: Arbitrary code execution via unsafe URL protocol handlingCVE-2026-110857 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat High No fix reported
GitPython: GitPython: Arbitrary file read via argument injection in branch checkoutCVE-2026-110859 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat High No fix reported
GitPython: GitPython: Arbitrary file relocation via symbolic link traversal in Submodule.move()CVE-2026-110860 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaiis/vllm-cpu-rhel9 Red Hat Medium No fix reported