Количество 6
Количество 6
CVE-2026-73619
GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.
CVE-2026-73619
GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.
CVE-2026-73619
GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.
CVE-2026-73619
GitPython before 3.1.57 contains an incomplete denylist in the unsafe_ ...
GHSA-m3x4-5jfw-2mqc
GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive.
BDU:2026-11718
Уязвимость функции Repo.archive() библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-73619 GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive. | CVSS3: 6.5 | 0% Низкий | 15 дней назад |
 | CVE-2026-73619 GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive. | CVSS3: 6.5 | 0% Низкий | 15 дней назад |
 | CVE-2026-73619 GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive. | CVSS3: 6.5 | 0% Низкий | 15 дней назад |
| CVE-2026-73619 GitPython before 3.1.57 contains an incomplete denylist in the unsafe_ ... | CVSS3: 6.5 | 0% Низкий | 15 дней назад |
| GHSA-m3x4-5jfw-2mqc GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive() to read arbitrary files from the filesystem and include them in the returned archive. | CVSS3: 6.5 | 0% Низкий | 15 дней назад |
 | BDU:2026-11718 Уязвимость функции Repo.archive() библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу