PkgSeer

Vulnerability PYSEC-2026-3995

Unknown

1 month ago

No summary available

0.1.7 and 0.3.1-beta2 - 3.1.53

Details

GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)

0.1.7 and 0.3.1-beta2 - 3.1.58 PYSEC-2026-3837

GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite

0.1.7 and 0.3.1-beta2 - 3.1.57 PYSEC-2026-3838

GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

0.1.7 and 0.3.1-beta2 - 3.1.57 PYSEC-2026-3840

GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()

0.1.7 and 0.3.1-beta2 - 3.1.57 PYSEC-2026-3841

GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution

0.1.7 and 0.3.1-beta2 - 3.1.57 PYSEC-2026-3843

View all vulnerabilities for these packages

Impacted packages

gitpython

Timeline

Published

1 month ago

Fixed (3.1.54)

2 months ago

Last Modified

2 hours ago