https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T18:32:18.878990+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-40267 CVE-2023-40267 2026-10-04T18:32:18.901789+00:00

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

 https://vulnerability.circl.lu/vuln/usn-6326-1 USN-6326-1 — python-git vulnerability 2026-10-04T18:32:18.901941+00:00

Affected: Ubuntu:Pro:14.04:LTS: python-git, Ubuntu:Pro:16.04:LTS: python-git, Ubuntu:Pro:18.04:LTS: python-git, Ubuntu:Pro:20.04:LTS: python-git, Ubuntu:Pro:22.04:LTS: python-git

It was discovered that GitPython did not block insecure options from user inputs in the clone command. An attacker could possibly use this issue to execute arbitrary commands on the host.