https://cvebrief.com/archive/cves/vendor/gitpython-developers/ High and critical gitpython-developers vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Thu, 10 Sep 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2026-87817/ cvebrief-gitpython-developers-CVE-2026-87817 Thu, 10 Sep 2026 12:00:00 GMT GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Fix documented: 3.1.60 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78675/ cvebrief-gitpython-developers-CVE-2026-78675 Tue, 25 Aug 2026 12:00:00 GMT GitPython before 3 Fix documented: 3.1.59 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78676/ cvebrief-gitpython-developers-CVE-2026-78676 Tue, 25 Aug 2026 12:00:00 GMT GitPython before 3.1.59 is vulnerable to argument injection where crafted multi-line git-config values allow attackers to inject malicious directives, leading to arbitrary code execution. Fix documented: 3.1.59 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-78677/ cvebrief-gitpython-developers-CVE-2026-78677 Tue, 25 Aug 2026 12:00:00 GMT GitPython before 3 Fix documented: 3.1.59 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-76220/ cvebrief-gitpython-developers-CVE-2026-76220 Thu, 20 Aug 2026 12:00:00 GMT GitPython before 3 Fix documented: 3.1.58 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-76221/ cvebrief-gitpython-developers-CVE-2026-76221 Thu, 20 Aug 2026 12:00:00 GMT GitPython before 3 Fix documented: 3.1.58 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-73625/ cvebrief-gitpython-developers-CVE-2026-73625 Fri, 14 Aug 2026 12:00:00 GMT GitPython versions before 3 Fix documented: 3.1.54 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67322/ cvebrief-gitpython-developers-CVE-2026-67322 Sun, 02 Aug 2026 12:00:00 GMT GitPython before 3 Fix documented: 3.1.52 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67323/ cvebrief-gitpython-developers-CVE-2026-67323 Sun, 02 Aug 2026 12:00:00 GMT GitPython before 3 Fix documented: 3.1.51 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67324/ cvebrief-gitpython-developers-CVE-2026-67324 Sun, 02 Aug 2026 12:00:00 GMT GitPython fails to properly filter joined short-option arguments, allowing attackers to bypass security gates and execute arbitrary commands during repository cloning. Fix documented: 3.1.51 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67325/ cvebrief-gitpython-developers-CVE-2026-67325 Sun, 02 Aug 2026 12:00:00 GMT GitPython before 3 Fix documented: 3.1.51 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-67326/ cvebrief-gitpython-developers-CVE-2026-67326 Sun, 02 Aug 2026 12:00:00 GMT GitPython before 3 Fix documented: 3.1.50 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-44244/ cvebrief-gitpython-developers-CVE-2026-44244 Sat, 09 May 2026 12:00:00 GMT GitPython is a python library used to interact with Git repositories Fix documented: 3.1.49 (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-42215/ cvebrief-gitpython-developers-CVE-2026-42215 Fri, 08 May 2026 12:00:00 GMT GitPython is a python library used to interact with Git repositories Fix documented: 3.1.47 (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-42284/ cvebrief-gitpython-developers-CVE-2026-42284 Fri, 08 May 2026 12:00:00 GMT GitPython is a python library used to interact with Git repositories Fix documented: 3.1.47 (OSV.dev). Independent analyst report on CVE Brief.