Security
فارسی
All products

Red Hat Satellite 6/python-gitpython

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)CVE-2026-69097 · GHSA-3RP5-JJMW-4WV2Version ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)CVE-2026-78675 · GHSA-7833-FR7J-V32QVersion ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.countCVE-2026-73621 · GHSA-P538-C434-8V24Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()CVE-2026-76217 · GHSA-HH9P-6WH2-4MFCVersion ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command executionCVE-2026-76220 · GHSA-WVPP-8HX9-P66JVersion ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooksCVE-2026-76218 · GHSA-9RJ7-RF2P-W77RVersion ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwriteCVE-2026-76219 · GHSA-4GMW-GG2M-W46PVersion ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)CVE-2026-76221 · GHSA-JM78-9FVV-MHGRVersion ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPathCVE-2026-44244 · GHSA-V87R-6Q3F-2J67Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPythonCVE-2026-76222 · GHSA-HMQ2-W58F-27JCVersion ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()CVE-2026-78678 · GHSA-5XXX-QHH7-9287Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCECVE-2026-78676 · GHSA-284H-M62Q-GF8WVersion ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Critical Fix reported
GitPython: GitPython: Directory traversal via untrusted submodule pathCVE-2026-100689 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Migration Toolkit for Applications 8/mta/mta-solution-server-rhel9 Red Hat Medium No fix reported
GitPython: GitPython: Information disclosure via environment variable expansion in submodule namesCVE-2026-110855 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaiis/vllm-cpu-rhel9 Red Hat Medium No fix reported
GitPython: GitPython: Arbitrary file relocation via symbolic link traversal in Submodule.move()CVE-2026-110860 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Red Hat AI Inference Server/rhaiis/vllm-cpu-rhel9 Red Hat Medium No fix reported