https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T20:35:45.499484+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-87819 CVE-2026-87819 — GitPython before 3.1.60 Denial of Service via ReDoS 2026-09-29T20:35:45.503583+00:00

Affected: gitpython-developers GitPython

GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic backtracking, exhausting CPU resources for over two minutes per commit access.

 https://vulnerability.circl.lu/vuln/pysec-2026-3984 PYSEC-2026-3984 2026-09-29T20:35:45.503690+00:00

Affected: PyPI: gitpython

GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic backtracking, exhausting CPU resources for over two minutes per commit access.