Gitpython Project Gitpython CVEs.
Published CVEs affecting Gitpython Project Gitpython, ranked by exploit odds.
-
CVE-2026-87819
GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic backtracking, exhausting CPU resources for over two minutes per commit access.
All CVEs affecting Gitpython Project Gitpython that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.