Количество 9
Количество 9
CVE-2026-76220
GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False.
CVE-2026-76220
GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False.
CVE-2026-76220
GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False.
CVE-2026-76220
GitPython before 3.1.58 contains a command execution vulnerability in ...
GHSA-wvpp-8hx9-p66j
GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution
BDU:2026-12060
Уязвимость механизма check_unsafe_options библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю выполнить произвольные команды
ROS-20260901-80-0021
Уязвимость GitPython
ROS-20260901-73-0016
Уязвимость GitPython
SUSE-SU-2026:4072-1
Security update for python-GitPython
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-76220 GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False. | CVSS3: 8.8 | 1% Низкий | 30 дней назад |
 | CVE-2026-76220 GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False. | CVSS3: 8.8 | 1% Низкий | 30 дней назад |
 | CVE-2026-76220 GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False. | CVSS3: 8.8 | 1% Низкий | 30 дней назад |
| CVE-2026-76220 GitPython before 3.1.58 contains a command execution vulnerability in ... | CVSS3: 8.8 | 1% Низкий | 30 дней назад |
| GHSA-wvpp-8hx9-p66j GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution | CVSS3: 8.8 | 1% Низкий | около 1 месяца назад |
 | BDU:2026-12060 Уязвимость механизма check_unsafe_options библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю выполнить произвольные команды | CVSS3: 8.8 | 1% Низкий | около 2 месяцев назад |
 | ROS-20260901-80-0021 Уязвимость GitPython | CVSS3: 8.8 | 1% Низкий | 17 дней назад |
| ROS-20260901-73-0016 Уязвимость GitPython | CVSS3: 8.8 | 1% Низкий | 17 дней назад |
 | SUSE-SU-2026:4072-1 Security update for python-GitPython | 10 дней назад |
Уязвимостей на страницу