When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

Teire

Changes Scan Docs Trust

← All changes

gitpython✕security

gitpython: GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name (moderate). GHSA-fx3j-rwgx-fr94, CVE-2026-110855.

gitpython: GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name: from its source to your code

osv.devquote checked
security advisory
Your codeby hand
Nemotron fixes

In its own wordsmatches the page ✓

GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

osv.dev/vulnerability/GHSA-fx3j-rwgx-f…from an advisory databasechecked 2026-10-27#cf6c4963a4

What Teire looks for in your code

nothing to search for: checked by hand

Does it reach your code?

Fix in all Scan a repo

read by a advisory-feed · advisory/pypi/gitpython/GHSA-fx3j-rwgx-fr94