https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:27:13.570981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04480 bdu:2024-04480 2026-10-03T14:27:13.974188+00:00 bdu:2024-04480 https://cve.radiocsirt.org/vuln/brew-checkov-cve-2022-24439 BREW-checkov-CVE-2022-24439 — GitPython vulnerable to Remote Code Execution due to improper user input validation 2026-10-03T14:27:13.974236+00:00

Affected: Homebrew: checkov

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.

 https://cve.radiocsirt.org/vuln/euvd-2026-258338 EUVD-2026-258338 2026-10-03T14:27:13.974274+00:00 EUVD-2026-258338 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24439 fkie_cve-2022-24439 2026-10-03T14:27:13.974289+00:00

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.

 https://cve.radiocsirt.org/vuln/ghsa-hcpj-qp55-gfph GHSA-hcpj-qp55-gfph — GitPython vulnerable to Remote Code Execution due to improper user input validation 2026-10-03T14:27:13.974313+00:00

Affected: PyPI: GitPython

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.

 https://cve.radiocsirt.org/vuln/gsd-2022-24439 gsd-2022-24439 2026-10-03T14:27:13.974335+00:00 gsd-2022-24439 https://cve.radiocsirt.org/vuln/oesa-2023-1529 OESA-2023-1529 — python-GitPython security update 2026-10-03T14:27:13.974347+00:00

Affected: openEuler:20.03-LTS-SP1: python-GitPython, openEuler:20.03-LTS-SP3: python-GitPython, openEuler:22.03-LTS: python-GitPython, openEuler:22.03-LTS-SP1: python-GitPython, openEuler:22.03-LTS-SP2: python-GitPython

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing.

Security Fix(es):

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.(CVE-2022-24439)

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.(CVE-2023-40267)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12596-1 openSUSE-SU-2024:12596-1 — python310-GitPython-3.1.30.1672298042.141cd65-1.1 on GA media 2026-10-03T14:27:13.974383+00:00

python310-GitPython-3.1.30.1672298042.141cd65-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2022-42992 PYSEC-2022-42992 2026-10-03T14:27:13.974402+00:00

Affected: PyPI: gitpython

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.

 https://cve.radiocsirt.org/vuln/rhsa-2023:5931 RHSA-2023:5931 — Red Hat Security Advisory: Satellite 6.13.5 Async Security Update 2026-10-03T14:27:13.974423+00:00

openssl: c_rehash script allows command injection openssl: the c_rehash script allows command injection foreman: OS command injection via ct_command and fcct_command GitPython: improper user input validation leads into a RCE ruby-git: code injection vulnerability ruby-git: code injection vulnerability Satellite/Foreman: Arbitrary code execution through yaml global parameters OpenSSL: Excessive time spent checking DH q parameter value python-django: Potential bypass of validation when uploading multiple files using one form field python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) GitPython: Insecure non-multi options in clone and clone_from is not blocked HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24439 UBUNTU-CVE-2022-24439 2026-10-03T14:27:13.974466+00:00

Affected: Ubuntu:Pro:14.04:LTS: python-git, Ubuntu:Pro:16.04:LTS: python-git, Ubuntu:Pro:18.04:LTS: python-git, Ubuntu:Pro:20.04:LTS: python-git, Ubuntu:Pro:22.04:LTS: python-git

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.