Skip to content

Product

pypi git-config-sync vulnerabilities

1 published CVE affecting pypi git-config-sync, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest pypi git-config-sync CVEs

Newest publication first

  1. MAL-2026-4273 Malicious code in git-config-sync (PyPI)

    Published
    Unknown

    -= Per source details. Do not edit below this line.=- Source: amazon-inspector (8e49db03099f1d6053a9ebada346c3816399bc47918c92d765162128a095c401) On import gitconfig_sync, the package's _core.py spawns a daemon thread (after a 3-15 second random delay) that walks ~/.ssh, ~/.aws,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.