https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:12:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04480 bdu:2024-04480 https://cve.radiocsirt.org/vuln/bdu:2024-04480 https://cve.radiocsirt.org/vuln/brew-checkov-cve-2022-24439 <p><strong>Affected:</strong> Homebrew: checkov</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> <p><strong>Affected:</strong> Homebrew: checkov</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> https://cve.radiocsirt.org/vuln/brew-checkov-cve-2022-24439 https://cve.radiocsirt.org/vuln/euvd-2026-258338 EUVD-2026-258338 https://cve.radiocsirt.org/vuln/euvd-2026-258338 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24439 <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-24439 https://cve.radiocsirt.org/vuln/ghsa-hcpj-qp55-gfph <p><strong>Affected:</strong> PyPI: GitPython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> <p><strong>Affected:</strong> PyPI: GitPython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> https://cve.radiocsirt.org/vuln/ghsa-hcpj-qp55-gfph https://cve.radiocsirt.org/vuln/gsd-2022-24439 gsd-2022-24439 https://cve.radiocsirt.org/vuln/gsd-2022-24439 https://cve.radiocsirt.org/vuln/oesa-2023-1529 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-GitPython, openEuler:20.03-LTS-SP3: python-GitPython, openEuler:22.03-LTS: python-GitPython, openEuler:22.03-LTS-SP1: python-GitPython, openEuler:22.03-LTS-SP2: python-GitPython</p> <p>GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing.</p> <p>Security Fix(es):</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.(CVE-2022-24439)</p> <p>GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.(CVE-2023-40267)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-GitPython, openEuler:20.03-LTS-SP3: python-GitPython, openEuler:22.03-LTS: python-GitPython, openEuler:22.03-LTS-SP1: python-GitPython, openEuler:22.03-LTS-SP2: python-GitPython</p> <p>GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing.</p> <p>Security Fix(es):</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.(CVE-2022-24439)</p> <p>GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.(CVE-2023-40267)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1529 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12596-1 <p>python310-GitPython-3.1.30.1672298042.141cd65-1.1 on GA media</p> <p>python310-GitPython-3.1.30.1672298042.141cd65-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12596-1 https://cve.radiocsirt.org/vuln/pysec-2022-42992 <p><strong>Affected:</strong> PyPI: gitpython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> <p><strong>Affected:</strong> PyPI: gitpython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> https://cve.radiocsirt.org/vuln/pysec-2022-42992 https://cve.radiocsirt.org/vuln/rhsa-2023:5931 <p>openssl: c_rehash script allows command injection openssl: the c_rehash script allows command injection foreman: OS command injection via ct_command and fcct_command GitPython: improper user input validation leads into a RCE ruby-git: code injection vulnerability ruby-git: code injection vulnerability Satellite/Foreman: Arbitrary code execution through yaml global parameters OpenSSL: Excessive time spent checking DH q parameter value python-django: Potential bypass of validation when uploading multiple files using one form field python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) GitPython: Insecure non-multi options in clone and clone_from is not blocked HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)</p> <p>openssl: c_rehash script allows command injection openssl: the c_rehash script allows command injection foreman: OS command injection via ct_command and fcct_command GitPython: improper user input validation leads into a RCE ruby-git: code injection vulnerability ruby-git: code injection vulnerability Satellite/Foreman: Arbitrary code execution through yaml global parameters OpenSSL: Excessive time spent checking DH q parameter value python-django: Potential bypass of validation when uploading multiple files using one form field python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) GitPython: Insecure non-multi options in clone and clone_from is not blocked HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)</p> https://cve.radiocsirt.org/vuln/rhsa-2023:5931 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24439 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-git, Ubuntu:Pro:16.04:LTS: python-git, Ubuntu:Pro:18.04:LTS: python-git, Ubuntu:Pro:20.04:LTS: python-git, Ubuntu:Pro:22.04:LTS: python-git</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-git, Ubuntu:Pro:16.04:LTS: python-git, Ubuntu:Pro:18.04:LTS: python-git, Ubuntu:Pro:20.04:LTS: python-git, Ubuntu:Pro:22.04:LTS: python-git</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24439