When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

Teire

Changes Scan Docs Trust

← All changes

gitpython✕security

gitpython: GitPython validates a submodule's ".git" path only after cloning into it (RCE)

GitPython validates a submodule's ".git" path only after cloning into it (RCE) (high). GHSA-83vg-56qc-22m7, CVE-2026-114145.

gitpython: GitPython validates a submodule's ".git" path only after cloning into it (RCE): from its source to your code

osv.devquote checked
security advisory
Your codeby hand
Nemotron fixes

In its own wordsmatches the page ✓

GitPython validates a submodule's ".git" path only after cloning into it (RCE)

osv.dev/vulnerability/GHSA-83vg-56qc-2…from an advisory databasechecked 2026-10-27#520dd5f506

What Teire looks for in your code

nothing to search for: checked by hand

Does it reach your code?

Fix in all Scan a repo

read by a advisory-feed · advisory/pypi/gitpython/GHSA-83vg-56qc-22m7