G
Vendor security profile
GitPython
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs34
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
34toplam CVE
Uncertain34 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
34Unknown
Latest vulnerabilities
6.9
CVE-2026-110860GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()
Patch status unknownEPSS %0
8.7
CVE-2026-110859GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name
Patch status unknownEPSS %0
9.2
CVE-2026-110858GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec
Patch status unknownEPSS %0
7.7
CVE-2026-110857GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs
Patch status unknownEPSS %0
8.7
CVE-2026-110856GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date
Patch status unknownEPSS %0
7.1
CVE-2026-110855GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name
Patch status unknownEPSS %0
8.7
8.7
CVE-2026-87819GitPython before 3.1.60 Denial of Service via ReDoS
Patch status unknownEPSS %1
7.1
CVE-2026-87818GitPython 3.1.59 Local File Content Oracle via --no-index
Patch status unknownEPSS %0
8.7
CVE-2026-87817GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation
Patch status unknownEPSS %0