Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:38:01 +0000 CVE-2026-73625 — GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling https://vulnerability.circl.lu/vuln/cve-2026-73625 <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clone_from, fetch, pull, push, ls_remote, iter_commits, blame, or archive methods to execute arbitrary OS commands via the --upload-pack parameter.</p> <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clone_from, fetch, pull, push, ls_remote, iter_commits, blame, or archive methods to execute arbitrary OS commands via the --upload-pack parameter.</p> https://vulnerability.circl.lu/vuln/cve-2026-73625