Skip to content

Product

redhat/satellite:el8/python-gitpython vulnerabilities

2 published CVES affecting redhat/satellite:el8/python-gitpython, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest redhat/satellite:el8/python-gitpython CVEs

Newest publication first

  1. CVE-2026-78678 GitPython before 3.1.59 Arbitrary File Read via Repo.blame()

    Published
    HighCVSS 7.1 EPSS 0.41%

    GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing these options to Repo.blame(). Attackers can supply revision values like --contents...

  2. CVE-2026-69097 GitPython before 3.1.53 Config Injection via Submodule Names

    Published
    HighCVSS 7.3 EPSS 0.27%

    GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names. Attackers can inject core.sshCommand or other dangerous config keys into the victim's .git/config...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.