CVE-20XX-?

Gitpython Project Gitpython CVEs.

Published CVEs affecting Gitpython Project Gitpython, ranked by exploit odds.

1 CVEs · updated 2026-11-06 06:52 UTC

Reset all
  1. CVE-2026-42284

    GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options)). A string like "--branch main --config core.hooksPath=/x" passes validation (starts with --branch), but after split becomes ["--branch", "main", "--config", "core.hooksPath=/x"]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47.

    Other Library Gitpython Project Gitpython

    8.1 HIGH 0.6% exploit odds Fix listed

All CVEs affecting Gitpython Project Gitpython that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.