GP
Vendor security profile
gitpython project
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs26
Critical2
CISA KEV0
Public exploit26
Patch rate%19
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
23
3
0
CVE KEV
CVE severity distribution
26toplam CVE
Critical2 (8%)
High23 (88%)
Medium1 (4%)
Patch and exploitation view
%19
Verified patch
%0
CISA KEV
%100
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
21Unknown
Latest vulnerabilities
8.7
CVE-2026-87819
GitPython before 3.1.60 Denial of Service via ReDoS
G
Patch status unknownEPSS %1
7.1
CVE-2026-87818
GitPython 3.1.59 Local File Content Oracle via --no-index
G
Patch status unknownEPSS %0
8.7
CVE-2026-87817
GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation
G
Patch status unknownEPSS %0
7.1
CVE-2026-78678
GitPython before 3.1.59 Arbitrary File Read via Repo.blame()
G
Patch verifiedEPSS %0
8.7
CVE-2026-78677
GitPython before 3.1.59 Path Traversal via separate-git-dir
G
Patch verifiedEPSS %1
9.3
CVE-2026-78676
GitPython before 3.1.59 Remote Code Execution via Config Injection
G
Patch verifiedEPSS %1
8.6
CVE-2026-78675
GitPython before 3.1.59 Local File Content Disclosure via .gitmodules
G
Patch verifiedEPSS %0
8.4
CVE-2026-76222
GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name
G
Patch status unknownEPSS %0
8.7
CVE-2026-76221
GitPython before 3.1.58 Config Injection via option-name
G
Patch status unknownEPSS %1
8.7
CVE-2026-76220
GitPython before 3.1.58 Command Execution via split_single_char_options
G
Patch status unknownEPSS %1