https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:27:14 +0000 https://vulnerability.circl.lu/vuln/cve-2026-42284 <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(&#34; &#34;.join(multi_options)). A string like &#34;--branch main --config core.hooksPath=/x&#34; passes validation (starts with --branch), but after split becomes [&#34;--branch&#34;, &#34;main&#34;, &#34;--config&#34;, &#34;core.hooksPath=/x&#34;]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47.</p> <p><strong>Affected:</strong> gitpython-developers GitPython</p> <p>GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(&#34; &#34;.join(multi_options)). A string like &#34;--branch main --config core.hooksPath=/x&#34; passes validation (starts with --branch), but after split becomes [&#34;--branch&#34;, &#34;main&#34;, &#34;--config&#34;, &#34;core.hooksPath=/x&#34;]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47.</p> https://vulnerability.circl.lu/vuln/cve-2026-42284 https://vulnerability.circl.lu/vuln/ghsa-x2qx-6953-8485 <p><strong>Affected:</strong> PyPI: GitPython</p> <p>### Summary</p> <p>`_clone()` validates `multi_options` as the original list, then executes `shlex.split(&#34; &#34;.join(multi_options))`. A string like `&#34;--branch main --config core.hooksPath=/x&#34;` passes validation (starts with `--branch`), but after split becomes `[&#34;--branch&#34;, &#34;main&#34;, &#34;--config&#34;, &#34;core.hooksPath=/x&#34;]`. Git applies the config and executes attacker hooks during clone.</p> <p>### Details</p> <p>The vulnerable code is in [`git/repo/base.py` line 1383](https://github.com/gitpython-developers/GitPython/blob/5937d14a2c5e532fcb3ece0f45bf75e5bf18539e/git/repo/base.py#L1383): ```python multi = shlex.split(&#34; &#34;.join(multi_options)) ```</p> <p>Then validation runs on the **original** list at [line 1390](https://github.com/gitpython-developers/GitPython/blob/5937d14a2c5e532fcb3ece0f45bf75e5bf18539e/git/repo/base.py#L1390): ```python Git.check_unsafe_options(options=multi_options, unsafe_options=cls.unsafe_git_clone_options) ```</p> <p>Then execution uses the **transformed** result at [line 1392](https://github.com/gitpython-developers/GitPython/blob/5937d14a2c5e532fcb3ece0f45bf75e5bf18539e/git/repo/base.py#L1392): ```python proc = git.clone(multi, &#34;--&#34;, url, path, ...) ```</p> <p>The [check at `git/cmd.py` line 959](https://github.com/gitpython-developers/GitPython/blob/5937d14a2c5e532fcb3ece0f45bf75e5bf18539e/git/cmd.py#L959) uses `startswith`: ```python if option.startswith(unsafe_option) or option == bare_option: ```</p> <p>`&#34;--branch main --config ...&#34;` does not start with `&#34;--config&#34;`, so it passes. After `shlex.…</p> <p><strong>Affected:</strong> PyPI: GitPython</p> <p>### Summary</p> <p>`_clone()` validates `multi_options` as the original list, then executes `shlex.split(&#34; &#34;.join(multi_options))`. A string like `&#34;--branch main --config core.hooksPath=/x&#34;` passes validation (starts with `--branch`), but after split becomes `[&#34;--branch&#34;, &#34;main&#34;, &#34;--config&#34;, &#34;core.hooksPath=/x&#34;]`. Git applies the config and executes attacker hooks during clone.</p> <p>### Details</p> <p>The vulnerable code is in [`git/repo/base.py` line 1383](https://github.com/gitpython-developers/GitPython/blob/5937d14a2c5e532fcb3ece0f45bf75e5bf18539e/git/repo/base.py#L1383): ```python multi = shlex.split(&#34; &#34;.join(multi_options)) ```</p> <p>Then validation runs on the **original** list at [line 1390](https://github.com/gitpython-developers/GitPython/blob/5937d14a2c5e532fcb3ece0f45bf75e5bf18539e/git/repo/base.py#L1390): ```python Git.check_unsafe_options(options=multi_options, unsafe_options=cls.unsafe_git_clone_options) ```</p> <p>Then execution uses the **transformed** result at [line 1392](https://github.com/gitpython-developers/GitPython/blob/5937d14a2c5e532fcb3ece0f45bf75e5bf18539e/git/repo/base.py#L1392): ```python proc = git.clone(multi, &#34;--&#34;, url, path, ...) ```</p> <p>The [check at `git/cmd.py` line 959](https://github.com/gitpython-developers/GitPython/blob/5937d14a2c5e532fcb3ece0f45bf75e5bf18539e/git/cmd.py#L959) uses `startswith`: ```python if option.startswith(unsafe_option) or option == bare_option: ```</p> <p>`&#34;--branch main --config ...&#34;` does not start with `&#34;--config&#34;`, so it passes. After `shlex.…</p> https://vulnerability.circl.lu/vuln/ghsa-x2qx-6953-8485 https://vulnerability.circl.lu/vuln/pysec-2026-2161 <p><strong>Affected:</strong> PyPI: gitpython</p> <p>GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(&#34; &#34;.join(multi_options)). A string like &#34;--branch main --config core.hooksPath=/x&#34; passes validation (starts with --branch), but after split becomes [&#34;--branch&#34;, &#34;main&#34;, &#34;--config&#34;, &#34;core.hooksPath=/x&#34;]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47.</p> <p><strong>Affected:</strong> PyPI: gitpython</p> <p>GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(&#34; &#34;.join(multi_options)). A string like &#34;--branch main --config core.hooksPath=/x&#34; passes validation (starts with --branch), but after split becomes [&#34;--branch&#34;, &#34;main&#34;, &#34;--config&#34;, &#34;core.hooksPath=/x&#34;]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47.</p> https://vulnerability.circl.lu/vuln/pysec-2026-2161