Security
فارسی
All products

Red Hat Satellite 6/satellite:el8/python-gitpython

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)CVE-2026-69097 · GHSA-3RP5-JJMW-4WV2Version ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
GitPython: Unsafe option check validates multi_options before shlex.split transformationCVE-2026-42284 · GHSA-X2QX-6953-8485Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython has Command Injection via Git options bypassCVE-2026-42215 · GHSA-RPM5-65CW-6HJ4Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPathCVE-2026-44244 · GHSA-V87R-6Q3F-2J67Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()CVE-2026-78678 · GHSA-5XXX-QHH7-9287Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported