CVE-20XX-?

Gitpython Project Gitpython CVEs.

Published CVEs affecting Gitpython Project Gitpython, ranked by exploit odds.

1 CVEs · updated 2026-11-06 02:16 UTC

Reset all
  1. CVE-2026-78676

    GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated GitPython config write, enabling arbitrary code execution via hook invocation.

    Code execution Device Gitpython Project Gitpython

    9.3 CRITICAL 0.6% exploit odds Fix listed

All CVEs affecting Gitpython Project Gitpython that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.