Количество 6
Количество 6
CVE-2026-73623
GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.
CVE-2026-73623
GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.
CVE-2026-73623
GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.
CVE-2026-73623
GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_ ...
GHSA-2726-phmx-rc26
GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository.
BDU:2026-11720
Уязвимость библиотеки Python для взаимодействия с git-репозиториями GitPython, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-73623 GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository. | CVSS3: 7.5 | 1% Низкий | 15 дней назад | |
CVE-2026-73623 GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository. | CVSS3: 7.5 | 1% Низкий | 15 дней назад | |
CVE-2026-73623 GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository. | CVSS3: 7.5 | 1% Низкий | 15 дней назад | |
CVE-2026-73623 GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_ ... | CVSS3: 7.5 | 1% Низкий | 15 дней назад | |
GHSA-2726-phmx-rc26 GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute when git clones the repository. | CVSS3: 7.5 | 1% Низкий | 15 дней назад | |
BDU:2026-11720 Уязвимость библиотеки Python для взаимодействия с git-репозиториями GitPython, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольный код | CVSS3: 7.5 | 1% Низкий | около 1 месяца назад |
Уязвимостей на страницу