CVE Tools
Track your stack

Gitpython-project

20 CVEs tracked since 2026. Since Aug 2026, none of them reached CISA KEV.

Gitpython-project CVEs per month

Aug 2026 to Aug 2026. Point at a month, or focus the strip and use the arrow keys.
Gitpython-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-08200

Products

The products that kept showing up in Gitpython-project's monthly top three, with their CVEs summed over those months.

  1. Gitpython201 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Gitpython-project.

  1. CVE-2026-87819GitPython before 3.1.60 Denial of Service via ReDoS7.5
  2. CVE-2026-87817GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation8.8
  3. CVE-2026-87818GitPython 3.1.59 Local File Content Oracle via --no-index6.5
  4. CVE-2026-78678GitPython before 3.1.59 Arbitrary File Read via Repo.blame()6.5
  5. CVE-2026-78677GitPython before 3.1.59 Path Traversal via separate-git-dir7.5
  6. CVE-2026-78676GitPython before 3.1.59 Remote Code Execution via Config Injection9.8
  7. CVE-2026-78675GitPython before 3.1.59 Local File Content Disclosure via .gitmodules8.4
  8. CVE-2026-76222GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name8.2
  9. CVE-2026-76220GitPython before 3.1.58 Command Execution via split_single_char_options8.8
  10. CVE-2026-76221GitPython before 3.1.58 Config Injection via option-name8.8
  11. CVE-2026-76219GitPython before 3.1.58 Arbitrary File Overwrite via read-tree8.1
  12. CVE-2026-76218GitPython before 3.1.58 Remote Code Execution via Repo.init7.5
  13. CVE-2026-76217GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file6.5
  14. CVE-2026-73625GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling8.8
  15. CVE-2026-73623GitPython before 3.1.54 Remote Code Execution via --template7.5

The record

Peak rank
#74 in Aug 2026
Busiest month shown
Aug 2026, 20 CVEs
Months with a KEV entry
0 since Aug 2026
Monthly snapshots
1 since 2026
Gitpython-project's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store