gitpython

Security advisories37

• gitpython: GitPython: Repository content can impersonate the git directory, leading to arbitrary code executionfixed in 3.1.60
• gitpython: GitPython: arbitrary file read via attacker-controlled branch name in `Head.checkout()` (incomplete fix of CVE-2026-78679)fixed in 3.2.0
• gitpython: GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCEfixed in 3.1.59
• gitpython: GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklistfixed in 3.1.51
• gitpython: GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file readfixed in 3.1.57
• gitpython: GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)fixed in 3.1.53
• gitpython: GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)fixed in 3.1.59
• gitpython: GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwritefixed in 3.1.58
• gitpython: GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()fixed in 3.1.57
• gitpython: GitPython submodule update path traversal can write outside the repositoryfixed in 3.1.62
• gitpython: GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()fixed in 3.1.59
• gitpython: GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooksfixed in 3.1.54
• gitpython: GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repositoryfixed in 3.1.48
• gitpython: GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)fixed in 3.1.59
• gitpython: GitPython validates a submodule's ".git" path only after cloning into it (RCE)fixed in 3.2.1
• gitpython: GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destinationfixed in 3.1.59
• gitpython: GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)fixed in 3.1.55
• gitpython: GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`fixed in 3.1.51
• gitpython: GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooksfixed in 3.1.58
• gitpython: GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command executionfixed in 3.2.0
• gitpython: GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)fixed in 3.1.54
• gitpython: GitPython: separate_git_dir leaks env vars via crafted .gitmodules submodule namefixed in 3.2.0
• gitpython: GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsingfixed in 3.1.60
• gitpython: GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktreefixed in 3.2.0
• gitpython: GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()fixed in 3.1.58
• gitpython: GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPythonfixed in 3.1.58
• gitpython: GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)fixed in 3.1.58
• gitpython: GitPython parse_actor_and_date() is vulnerable to quadratic backtracking on malformed identity linesfixed in 3.2.0
• gitpython: GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPathfixed in 3.1.50
• gitpython: GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.countfixed in 3.1.56
• gitpython: GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command executionfixed in 3.1.54
• gitpython: GitPython has Command Injection via Git options bypassfixed in 3.1.47
• gitpython: GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URLfixed in 3.1.52
• gitpython: GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPathfixed in 3.1.49
• gitpython: GitPython command wrappers omit unsafe protocol and option checksfixed in 3.2.0
• gitpython: GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command executionfixed in 3.1.58
• gitpython: GitPython: Unsafe option check validates multi_options before shlex.split transformationfixed in 3.1.47

Versions that change something