Search CVE reports

Toggle filters

1 – 5 of 5 results

CVE-2024-22190

Medium priority
Needs evaluation

GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs...

1 affected package

python-git

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python-git Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-41040

Medium priority
Needs evaluation

GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the...

1 affected package

python-git

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python-git Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-40590

Negligible priority
Ignored

GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the...

1 affected package

python-git

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python-git — Ignored Ignored Ignored
Show less packages

CVE-2023-40267

Medium priority

Some fixes available 6 of 10

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

1 affected package

python-git

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python-git Needs evaluation Fixed Fixed Fixed
Show less packages

CVE-2022-24439

Medium priority

Some fixes available 6 of 11

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this...

2 affected packages

python-git, gitpython

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
python-git Needs evaluation Fixed Fixed Fixed
gitpython — Not in release Not in release Not in release
Show less packages