Количество 5
Количество 5
CVE-2026-76222
(GitPython before 3.1.58 fails to validate submodule names from .gitmod ...)
CVE-2026-76222
GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory. Attackers can craft malicious repositories with traversal sequences in submodule names that GitPython processes during submodule initialization, creating attacker-controlled Git repositories at escaped filesystem locations.
CVE-2026-76222
GitPython before 3.1.58 fails to validate submodule names from .gitmod ...
GHSA-3vrx-526r-64rm
GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory. Attackers can craft malicious repositories with traversal sequences in submodule names that GitPython processes during submodule initialization, creating attacker-controlled Git repositories at escaped filesystem locations.
BDU:2026-12062
Уязвимость функции sm_name() файла src/GitPython/git/objects/submodule/util.py библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-76222 (GitPython before 3.1.58 fails to validate submodule names from .gitmod ...) | CVSS3: 8.2 | 0% Низкий | 8 дней назад |
 | CVE-2026-76222 GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory. Attackers can craft malicious repositories with traversal sequences in submodule names that GitPython processes during submodule initialization, creating attacker-controlled Git repositories at escaped filesystem locations. | CVSS3: 8.2 | 0% Низкий | 8 дней назад |
| CVE-2026-76222 GitPython before 3.1.58 fails to validate submodule names from .gitmod ... | CVSS3: 8.2 | 0% Низкий | 8 дней назад |
| GHSA-3vrx-526r-64rm GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory. Attackers can craft malicious repositories with traversal sequences in submodule names that GitPython processes during submodule initialization, creating attacker-controlled Git repositories at escaped filesystem locations. | CVSS3: 8.2 | 0% Низкий | 8 дней назад |
 | BDU:2026-12062 Уязвимость функции sm_name() файла src/GitPython/git/objects/submodule/util.py библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации | CVSS3: 8.2 | 0% Низкий | 24 дня назад |
Уязвимостей на страницу