Количество 6
Количество 6
CVE-2026-73624
GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.
CVE-2026-73624
GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.
CVE-2026-73624
GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.
CVE-2026-73624
GitPython versions before 3.1.54 contain an arbitrary file overwrite v ...
GHSA-6cm2-456v-hrq7
GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.
BDU:2026-11882
Уязвимость метода Diffable.diff библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю перезаписывать произвольные файлы в системе
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-73624 GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level. | CVSS3: 8.1 | 0% Низкий | 16 дней назад |
 | CVE-2026-73624 GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level. | CVSS3: 8.1 | 0% Низкий | 16 дней назад |
 | CVE-2026-73624 GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level. | CVSS3: 8.1 | 0% Низкий | 16 дней назад |
| CVE-2026-73624 GitPython versions before 3.1.54 contain an arbitrary file overwrite v ... | CVSS3: 8.1 | 0% Низкий | 16 дней назад |
| GHSA-6cm2-456v-hrq7 GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level. | CVSS3: 8.1 | 0% Низкий | 16 дней назад |
 | BDU:2026-11882 Уязвимость метода Diffable.diff библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю перезаписывать произвольные файлы в системе | CVSS3: 8.1 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу