G
Vendor security profile
gitpython-developers
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs28
Critical2
CISA KEV0
Public exploit27
Patch rate%21
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
24
4
0
CVE KEV
CVE severity distribution
28toplam CVE
Critical2 (7%)
High25 (89%)
Medium1 (4%)
Patch and exploitation view
%21
Verified patch
%0
CISA KEV
%96
Public exploit
6Patch available
0Partial
0Workaround
0Vendor: no patch
22Unknown
Latest vulnerabilities
8.7
CVE-2026-100689
GitPython before 3.1.62 Path Traversal via gitmodules path
G
Patch status unknownEPSS %0
8.7
CVE-2026-87819
GitPython before 3.1.60 Denial of Service via ReDoS
G
Patch status unknownEPSS %1
7.1
CVE-2026-87818
GitPython 3.1.59 Local File Content Oracle via --no-index
G
Patch status unknownEPSS %0
8.7
CVE-2026-87817
GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation
G
Patch status unknownEPSS %0
7.1
CVE-2026-78679
GitPython before 3.1.59 Arbitrary File Read via TagReference.create
G
Patch verifiedEPSS %0
7.1
CVE-2026-78678
GitPython before 3.1.59 Arbitrary File Read via Repo.blame()
G
Patch verifiedEPSS %0
8.7
CVE-2026-78677
GitPython before 3.1.59 Path Traversal via separate-git-dir
G
Patch verifiedEPSS %1
9.3
CVE-2026-78676
GitPython before 3.1.59 Remote Code Execution via Config Injection
G
Patch verifiedEPSS %1
8.6
CVE-2026-78675
GitPython before 3.1.59 Local File Content Disclosure via .gitmodules
G
Patch verifiedEPSS %0
8.4
CVE-2026-76222
GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name
G
Patch status unknownEPSS %0