https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 21:10:03 +0000 https://vulnerability.circl.lu/vuln/cve-2022-24439 <p><strong>Affected:</strong> GitPython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> <p><strong>Affected:</strong> GitPython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> https://vulnerability.circl.lu/vuln/cve-2022-24439 https://vulnerability.circl.lu/vuln/ghsa-hcpj-qp55-gfph <p><strong>Affected:</strong> PyPI: GitPython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> <p><strong>Affected:</strong> PyPI: GitPython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> https://vulnerability.circl.lu/vuln/ghsa-hcpj-qp55-gfph https://vulnerability.circl.lu/vuln/pysec-2022-42992 <p><strong>Affected:</strong> PyPI: gitpython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> <p><strong>Affected:</strong> PyPI: gitpython</p> <p>All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.</p> https://vulnerability.circl.lu/vuln/pysec-2022-42992