Security
فارسی
All products

Red Hat Satellite 6/satellite-capsule:el8/python-gitpython

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)CVE-2026-69097 · GHSA-3RP5-JJMW-4WV2Version ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)CVE-2026-73624 · GHSA-FJR4-X663-MWXCVersion ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)CVE-2026-73622 · GHSA-94P4-4CQ8-9G67Version ranges need review. gitpythonRed Hat AI Inference Server/rhaiis/vllm-cpu-rhel9 PyPIRed Hat High Fix reported
GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooksCVE-2026-73623 · GHSA-6P8H-3WGX-97GFVersion ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()CVE-2026-73619 · GHSA-539M-9XH6-Q6RRVersion ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.countCVE-2026-73621 · GHSA-P538-C434-8V24Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command executionCVE-2026-73625 · GHSA-R9MR-M37C-5FR3Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file readCVE-2026-73620 · GHSA-3F7W-8RR8-F37FVersion ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
GitPython: Unsafe option check validates multi_options before shlex.split transformationCVE-2026-42284 · GHSA-X2QX-6953-8485Version ranges need review. gitpythonExploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported