Changes

2026-10

• 

  gitpython: GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)

  PyPI · gitpython✕security
  Quote

  “GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)”

  osv.dev ›
• 

  gitpython: GitPython validates a submodule's ".git" path only after cloning into it (RCE)

  PyPI · gitpython✕security
  Quote

  “GitPython validates a submodule's ".git" path only after cloning into it (RCE)”

  osv.dev ›
• 

  gitpython: GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination

  PyPI · gitpython✕security
  Quote

  “GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination”

  osv.dev ›
• 

  gitpython: GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)

  PyPI · gitpython✕security
  Quote

  “GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)”

  osv.dev ›
• 

  gitpython: GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`

  PyPI · gitpython✕security
  Quote

  “GitPython: command injection via unguarded Git options in Repo.archive(), git.ls_remote(), and arbitrary file overwrite via Repo.iter_commits() / Repo.blame()”

  osv.dev ›
• 

  gitpython: GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

  PyPI · gitpython✕security
  Quote

  “GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks”

  osv.dev ›
• 

  gitpython: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution

  PyPI · gitpython✕security
  Quote

  “GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution”

  osv.dev ›
• 

  gitpython: GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)

  PyPI · gitpython✕security
  Quote

  “GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)”

  osv.dev ›
• 

  gitpython: GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name

  PyPI · gitpython✕security
  Quote

  “GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule name”

  osv.dev ›
• 

  gitpython: GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing

  PyPI · gitpython✕security
  Quote

  “GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing”

  osv.dev ›
• 

  gitpython: GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree

  PyPI · gitpython✕security
  Quote

  “GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree”

  osv.dev ›
• 

  gitpython: GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()

  PyPI · gitpython✕security
  Quote

  “GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()”

  osv.dev ›
• 

  gitpython: GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython

  PyPI · gitpython✕security
  Quote

  “GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython”

  osv.dev ›
• 

  gitpython: GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)

  PyPI · gitpython✕security
  Quote

  “GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)”

  osv.dev ›
• 

  gitpython: GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines

  PyPI · gitpython✕security
  Quote

  “GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity lines”

  osv.dev ›
• 

  gitpython: GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath

  PyPI · gitpython✕security
  Quote

  “GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath”

  osv.dev ›
• 

  gitpython: GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count

  PyPI · gitpython✕security
  Quote

  “GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count”

  osv.dev ›
• 

  gitpython: GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution

  PyPI · gitpython✕security
  Quote

  “GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution”

  osv.dev ›
• 

  gitpython: GitPython has Command Injection via Git options bypass

  PyPI · gitpython✕security
  Quote

  “GitPython has Command Injection via Git options bypass”

  osv.dev ›
• 

  gitpython: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

  PyPI · gitpython✕security
  Quote

  “GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL”

  osv.dev ›
• 

  gitpython: GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath

  PyPI · gitpython✕security
  Quote

  “GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath”

  osv.dev ›
• 

  gitpython: GitPython command wrappers omit unsafe protocol and option checks

  PyPI · gitpython✕security
  Quote

  “GitPython command wrappers omit unsafe protocol and option checks”

  osv.dev ›
• 

  gitpython: GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution

  PyPI · gitpython✕security
  Quote

  “GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution”

  osv.dev ›
• 

  gitpython: GitPython: Unsafe option check validates multi_options before shlex.split transformation

  PyPI · gitpython✕security
  Quote

  “GitPython: Unsafe option check validates multi_options before shlex.split transformation”

  osv.dev ›
• 

  gunicorn: Gunicorn HTTP Request/Response Smuggling vulnerability

  PyPI · gunicorn✕security
  Quote

  “Gunicorn HTTP Request/Response Smuggling vulnerability”

  osv.dev ›
• 

  gunicorn: Request smuggling leading to endpoint restriction bypass in Gunicorn

  PyPI · gunicorn✕security
  Quote

  “Request smuggling leading to endpoint restriction bypass in Gunicorn”

  osv.dev ›
• 

  h11: h11 accepts some malformed Chunked-Encoding bodies

  PyPI · h11✕security
  Quote

  “h11 accepts some malformed Chunked-Encoding bodies”

  osv.dev ›
• 

  idna: Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

  PyPI · idna✕security
  Quote

  “Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix”

  osv.dev ›
• 

  jinja2: Jinja2 sandbox escape via string formatting

  PyPI · jinja2✕security
  Quote

  “Jinja2 sandbox escape via string formatting”

  osv.dev ›
• 

  jinja2: Jinja2 vulnerable to sandbox breakout through attr filter selecting format method

  PyPI · jinja2✕security
  Quote

  “Jinja2 vulnerable to sandbox breakout through attr filter selecting format method”

  osv.dev ›
• 

  jinja2: Regular Expression Denial of Service (ReDoS) in Jinja2

  PyPI · jinja2✕security
  Quote

  “Regular Expression Denial of Service (ReDoS) in Jinja2”

  osv.dev ›
• 

  jinja2: Jinja has a sandbox breakout through malicious filenames

  PyPI · jinja2✕security
  Quote

  “Jinja has a sandbox breakout through malicious filenames”

  osv.dev ›
• 

  jinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

  PyPI · jinja2✕security
  Quote

  “Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter”

  osv.dev ›
• 

  jinja2: Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

  PyPI · jinja2✕security
  Quote

  “Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter”

  osv.dev ›
• 

  jinja2: Jinja has a sandbox breakout through indirect reference to format method

  PyPI · jinja2✕security
  Quote

  “Jinja has a sandbox breakout through indirect reference to format method”

  osv.dev ›
• 

  mako: Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

  PyPI · mako✕security
  Quote

  “Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup”

  osv.dev ›
• 

  mako: Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

  PyPI · mako✕security
  Quote

  “Mako: Path traversal via drive-letter URI on Windows in TemplateLookup”

  osv.dev ›
• 

  mako: Mako: Path traversal via double-slash URI prefix in TemplateLookup

  PyPI · mako✕security
  Quote

  “Mako: Path traversal via double-slash URI prefix in TemplateLookup”

  osv.dev ›
• 

  mako: mako is vulnerable to Regular Expression Denial of Service

  PyPI · mako✕security
  Quote

  “mako is vulnerable to Regular Expression Denial of Service”

  osv.dev ›
• 

  py: py vulnerable to Regular Expression Denial of Service

  PyPI · py✕security
  Quote

  “py vulnerable to Regular Expression Denial of Service”

  osv.dev ›
• 

  pygments: Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

  PyPI · pygments✕security
  Quote

  “Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching”

  osv.dev ›
• 

  pytest: pytest has vulnerable tmpdir handling

  PyPI · pytest✕security
  Quote

  “pytest has vulnerable tmpdir handling”

  osv.dev ›
• 

  python-dotenv: python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback

  PyPI · python-dotenv✕security
  Quote

  “python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback”

  osv.dev ›
• 

  python-multipart: Denial of service (DoS) via deformation `multipart/form-data` boundary

  PyPI · python-multipart✕security
  Quote

  “Denial of service (DoS) via deformation multipart/form-data boundary”

  osv.dev ›
• 

  python-multipart: python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

  PyPI · python-multipart✕security
  Quote

  “python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service”

  osv.dev ›
• 

  python-multipart: python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

  PyPI · python-multipart✕security
  Quote

  “python-multipart: Semicolon treated as querystring field separator enables parameter smuggling”

  osv.dev ›
• 

  python-multipart: python-multipart affected by Denial of Service via large multipart preamble or epilogue data

  PyPI · python-multipart✕security
  Quote

  “python-multipart affected by Denial of Service via large multipart preamble or epilogue data”

  osv.dev ›
• 

  python-multipart: python-multipart has Denial of Service via unbounded multipart part headers

  PyPI · python-multipart✕security
  Quote

  “python-multipart has Denial of Service via unbounded multipart part headers”

  osv.dev ›
• 

  python-multipart: python-multipart: Negative Content-Length in parse_form buffers the entire body in memory

  PyPI · python-multipart✕security
  Quote

  “python-multipart: Negative Content-Length in parse_form buffers the entire body in memory”

  osv.dev ›
• 

  python-multipart: python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters

  PyPI · python-multipart✕security
  Quote

  “python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters”

  osv.dev ›
• 

  python-multipart: Python-Multipart has Arbitrary File Write via Non-Default Configuration

  PyPI · python-multipart✕security
  Quote

  “Python-Multipart has Arbitrary File Write via Non-Default Configuration”

  osv.dev ›
• 

  requests: Requests vulnerable to .netrc credentials leak via malicious URLs

  PyPI · requests✕security
  Quote

  “Requests vulnerable to .netrc credentials leak via malicious URLs”

  osv.dev ›
• 

  requests: Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

  PyPI · requests✕security
  Quote

  “Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function”

  osv.dev ›
• 

  sqlalchemy: SQLAlchemy is vulnerable to SQL Injection via group_by parameter

  PyPI · sqlalchemy✕security
  Quote

  “SQLAlchemy is vulnerable to SQL Injection via group_by parameter”

  osv.dev ›
• 

  sqlalchemy: SQLAlchemy vulnerable to SQL Injection via order_by parameter

  PyPI · sqlalchemy✕security
  Quote

  “SQLAlchemy vulnerable to SQL Injection via order_by parameter”

  osv.dev ›
• 

  starlette: Starlette has possible denial-of-service vector when parsing large files in multipart forms

  PyPI · starlette✕security
  Quote

  “Starlette has possible denial-of-service vector when parsing large files in multipart forms”

  osv.dev ›
• 

  starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

  PyPI · starlette✕security
  Quote

  “Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS”

  osv.dev ›
• 

  starlette: Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

  PyPI · starlette✕security
  Quote

  “Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks”

  osv.dev ›
• 

  starlette: Starlette Denial of service (DoS) via multipart/form-data

  PyPI · starlette✕security
  Quote

  “Starlette Denial of service (DoS) via multipart/form-data”

  osv.dev ›
• 

  starlette: Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname

  PyPI · starlette✕security
  Quote

  “Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname”

  osv.dev ›