gitpython: GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines
GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines (high). GHSA-m64x-33q8-m5h7, CVE-2026-110856.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?