VulertSecurity VulertSecurity

Vulnerability Database · PyPI · gitpython · Version

gitpython 2.1.4

2.1.4 is affected by 86 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 3.2.1.

Critical 6 High 54 Medium 10 Low 0 Unrated 16

All gitpython versions & vulnerabilities → Source repository Search the database for this package →
Released 10 Jun 2017 Licence non-standard Also known from other sources 68 Newer releases 116 Database updated 23/Oct/2026

Release and licence data published by PyPI. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

gitpython 2.1.4 vulnerabilities

86 vulnerabilities cover gitpython 2.1.4. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-78676: GitPython Critical Vulnerability Leading to Remote Code Execution via Config Injection 9.8 critical 3.1.59 08 Sep 2026
Critical RCE Vulnerability in GitPython: Multi-Line Config Corruption 9.8 critical No fix published 25 Aug 2026
Critical Vulnerability in GitPython: Bypass of Unsafe Clone Option Gate 9.8 critical No fix published 01 Aug 2026
CVE-2026-42284: GitPython Vulnerability Allows Execution of Attacker Hooks During Clone 9.8 critical 3.1.47 07 May 2026
CVE-2023-40267: GitPython Remote Code Execution Vulnerability 9.8 critical 3.1.32 11 Aug 2023
CVE-2026-87817: GitPython Arbitrary Code Execution via Misresolved Git Directory 8.8 high 3.1.60 30 Sep 2026
CVE-2026-76220: GitPython Command Execution Vulnerability via Unsafe Option Bypass 8.8 high 3.1.58 10 Sep 2026
CVE-2026-67325: GitPython Command Injection via Long-Option Prefix Abbreviation Bypass 8.8 high 3.1.51 10 Sep 2026
Arbitrary Code Execution Vulnerability in GitPython: Impersonation of Git Directory 8.8 high No fix published 09 Sep 2026
Command Execution Vulnerability in GitPython: Bypass of Unsafe Option Guard 8.8 high No fix published 19 Aug 2026
CVE-2026-73623: GitPython Arbitrary Command Execution via Incomplete Denylist 8.8 high 3.1.54 13 Aug 2026
Command Execution Vulnerability in GitPython: Bypass of Unsafe Option Guard 8.8 high 3.1.58 07 Aug 2026
GitPython Vulnerability: Option Name Injection Leading to Remote Code Execution 8.8 high 3.1.58 07 Aug 2026
Command Injection Vulnerability in GitPython: Bypass of CVE-2026-42215 Blocklist 8.8 high No fix published 01 Aug 2026
Arbitrary Command Execution Vulnerability in GitPython: Unsafe Option Guard Bypass 8.8 high 3.1.54 24 Jul 2026
Command Injection Vulnerability in GitPython: Bypass of CVE-2026-42215 Blocklist 8.8 high 3.1.51 21 Jul 2026
CVE-2026-67323: GitPython Command Injection and File Overwrite Vulnerability 8.4 high 3.1.51 10 Sep 2026
CVE-2026-78675: GitPython Arbitrary Local File Content Disclosure via Untrusted .gitmodules 8.4 high 3.1.59 08 Sep 2026
Arbitrary Local File Disclosure in GitPython - High Severity Vulnerability 8.4 high No fix published 25 Aug 2026
Command Injection and File Overwrite Vulnerability in GitPython 8.4 high No fix published 01 Aug 2026
Command Injection and File Overwrite Vulnerability in GitPython 8.4 high 3.1.51 21 Jul 2026
Arbitrary Git Repository Creation Vulnerability in GitPython 8.2 high No fix published 19 Aug 2026
Arbitrary Git Repository Creation Vulnerability in GitPython 8.2 high 3.1.58 07 Aug 2026
CVE-2026-76219: GitPython Arbitrary File Overwrite Vulnerability 8.1 high 3.1.58 10 Sep 2026
Arbitrary File Overwrite Vulnerability in GitPython: Critical Security Flaw 8.1 high No fix published 19 Aug 2026
Arbitrary File Overwrite Vulnerability in GitPython: CVE-2026-XXXX 8.1 high 3.1.58 07 Aug 2026
Arbitrary File Overwrite and Read Vulnerability in GitPython 8.1 high 3.1.57 03 Aug 2026
Arbitrary File Overwrite Vulnerability in GitPython: Exploitable via Git Diff Output Injection 8.1 high 3.1.54 24 Jul 2026
CVE-2026-42284: GitPython Unsafe Option Check Leads to Code Execution via Malicious Hooks 8.1 high 3.1.47 25 Apr 2026
CVE-2022-24439: Remote Code Execution in GitPython 8.1 critical 3.1.30 06 Dec 2022
CVE-2026-78675: GitPython Vulnerability Allows Disclosure of Local File Content via Malicious .gitmodules 7.8 high 3.1.59 25 Aug 2026
CVE-2026-67326: GitPython Arbitrary Section Header Injection Vulnerability 7.8 high 3.1.50 01 Aug 2026
CVE-2026-44244: GitPython Vulnerability Allows Execution of Attacker-Controlled Scripts via Hooks 7.8 high 3.1.49 07 May 2026
CVE-2026-44244: GitPython Newline Injection Vulnerability Leading to Remote Code Execution 7.8 high 3.1.49 06 May 2026
CVE-2026-44243: GitPython Path Traversal Vulnerability Leading to Arbitrary File Manipulation 7.8 high 3.1.48 06 May 2026
CVE-2024-22190: Incomplete Fix for GitPython Untrusted Search Path Vulnerability 7.8 high ef3192cc414f2fd9978908454f6fd95243784c7f 11 Jan 2024
Untrusted search path allows arbitrary code execution in gitpython 7.8 high 3.1.41 10 Jan 2024
CVE-2023-40590: GitPython Untrusted Search Path on Windows Systems Leading to Arbitrary Code Execution 7.8 high 3.1.33 29 Aug 2023
CVE-2023-40590: Vulnerability in GitPython 7.8 high 3.1.33 28 Aug 2023
CVE-2026-114145: GitPython submodule path validation can enable code execution 7.5 high 3.2.1 22 Oct 2026
CVE-2026-87819: GitPython Denial of Service via Catastrophic Backtracking in Commit Author Parsing 7.5 high 3.1.60 30 Sep 2026
CVE-2026-76218: GitPython Arbitrary Command Execution via Unguarded Repo.init 7.5 high 3.1.58 10 Sep 2026
CVE-2026-67322: GitPython Environment-variable Exfiltration via Repo.clone_from() URL 7.5 high 3.1.52 10 Sep 2026
Denial of Service Vulnerability in GitPython: Catastrophic Backtracking in Commit Author Parsing 7.5 high No fix published 09 Sep 2026
CVE-2026-87819: GitPython Regular Expression Denial of Service Vulnerability 7.5 high 3.1.60 09 Sep 2026
CVE-2026-78677: GitPython Arbitrary Git Directory Creation Vulnerability 7.5 high 3.1.59 08 Sep 2026
Arbitrary Git Directory Creation Vulnerability in GitPython: CVE-2026-XXXX 7.5 high No fix published 25 Aug 2026
Arbitrary Command Execution Vulnerability in GitPython: Repo.init Function 7.5 high No fix published 19 Aug 2026
Arbitrary Command Execution in GitPython: Repo.init Vulnerability 7.5 high 3.1.58 07 Aug 2026
Environment Variable Exfiltration Vulnerability in GitPython 7.5 high No fix published 01 Aug 2026
GitPython Vulnerability: Environment-variable Exfiltration via Repo.create_remote() 7.5 high 3.1.55 24 Jul 2026
Arbitrary Command Execution Vulnerability in GitPython: Incomplete Denylist for Clone Options 7.5 high 3.1.54 24 Jul 2026
Environment Variable Exfiltration Vulnerability in GitPython 7.5 high 3.1.52 21 Jul 2026
CVE-2026-69097: GitPython Vulnerability Allows Remote Code Execution via Malicious Submodule Names 7.3 high 3.1.53 03 Aug 2026
CVE-2026-44243: GitPython Vulnerability Allows Unauthorized File Manipulation 7.1 high 3.1.48 07 May 2026
GitPython Vulnerability: Section-Name Injection Leading to Remote Code Execution 7.0 high 3.1.53 24 Jul 2026
Newline Injection Vulnerability in GitPython Allows RCE via core.hooksPath 7.0 high 3.1.50 08 May 2026
CVE-2026-78679: GitPython Arbitrary File Read via TagReference.create Positional Reference Bypass 6.5 medium 3.1.59 10 Sep 2026
CVE-2026-76217: GitPython Arbitrary File Read Vulnerability 6.5 medium 3.1.58 10 Sep 2026
CVE-2026-78679: GitPython Arbitrary File Read via TagReference.create Positional Reference Bypass 6.5 medium 3.1.59 08 Sep 2026
CVE-2026-78678: GitPython Arbitrary File Read via Incomplete Denylist in Repo.blame() 6.5 medium 3.1.59 08 Sep 2026
GitPython Arbitrary File Read Vulnerability: Incomplete Denylist in unsafe_git_revision_options 6.5 high No fix published 25 Aug 2026
Arbitrary File Read Vulnerability in GitPython: TagReference.create Method 6.5 high No fix published 25 Aug 2026
Arbitrary File Read Vulnerability in GitPython: Critical Security Flaw 6.5 high No fix published 19 Aug 2026
Arbitrary File Read Vulnerability in GitPython: Exploitable via Pathspec Options 6.5 medium 3.1.58 07 Aug 2026
Arbitrary File Read Vulnerability in GitPython: Incomplete Denylist for Repo.archive() 6.5 medium 3.1.57 03 Aug 2026
CVE-2023-41040: GitPython Arbitrary File Read Vulnerability 6.5 medium 3.1.35 30 Aug 2023
CVE-2026-100689: GitPython Path Traversal Vulnerability Allows Writing Outside Repository 6.1 medium 3.1.62 30 Sep 2026
Arbitrary File Truncation Vulnerability in GitPython: A Risk to File Integrity 5.4 medium 3.1.56 03 Aug 2026
CVE-2023-41040: Blind local file inclusion in gitpython 4.0 medium 3.1.37 30 Aug 2023
CVE-2026-87817: GitPython Arbitrary Code Execution via Improper Git Directory Validation N/A unrated 3.1.60 09 Sep 2026
CVE-2026-87818: GitPython Arbitrary File Read Vulnerability N/A unrated 3.1.60 09 Sep 2026
CVE-2026-78676: GitPython Vulnerability Allows Arbitrary Code Execution via Malicious Config Files N/A unrated 3.1.59 25 Aug 2026
CVE-2026-78677: GitPython Arbitrary Directory Creation Vulnerability N/A unrated 3.1.59 25 Aug 2026
CVE-2026-78678: GitPython Incomplete Denylist Vulnerability Allows File Leakage N/A unrated 3.1.59 25 Aug 2026
CVE-2026-76222: GitPython Submodule Name Validation Vulnerability N/A unrated 3.1.58 19 Aug 2026
CVE-2026-76221: GitPython Config-Name Injection Vulnerability N/A unrated 3.1.58 19 Aug 2026
CVE-2026-73620: GitPython Vulnerability Allows Unsafe Option Forwarding N/A unrated 3.1.57 13 Aug 2026
CVE-2026-73621: GitPython Argument Injection Vulnerability in Commit.count() Method N/A unrated 3.1.56 13 Aug 2026
CVE-2026-73622: GitPython Vulnerability in URL Handling Allows Secret Exfiltration N/A unrated 3.1.55 13 Aug 2026
CVE-2026-73625: GitPython Remote Code Execution Vulnerability N/A unrated 3.1.54 13 Aug 2026
CVE-2026-73624: GitPython Arbitrary File Overwrite Vulnerability N/A unrated 3.1.54 13 Aug 2026
CVE-2026-73619: GitPython Incomplete Denylist Vulnerability Allows Arbitrary File Access N/A unrated 3.1.57 13 Aug 2026
CVE-2026-67324: GitPython Short-Option Bypass Vulnerability N/A unrated 3.1.50 01 Aug 2026
CVE-2023-40267: Insecure Non-Multi Options in GitPython Clone N/A unrated ca965ecc81853bca7675261729143f54e5bf4cdd 11 Aug 2023
CVE-2022-24439: Remote Code Execution in gitpython N/A unrated 3.1.30 06 Dec 2022

Looking for another version, or everything Vulert holds for gitpython?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About gitpython 2.1.4

Is gitpython 2.1.4 vulnerable?

Yes. 86 vulnerabilities in the Vulert database cover gitpython 2.1.4: 6 critical, 54 high, 10 medium and 0 low, plus 16 not yet rated. The upgrade Vulert recommends is 3.2.1, and each entry above names the fixed version to move to.

Which version of gitpython should I use instead of 2.1.4?

3.2.1 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is 2.1.4 the latest release of gitpython?

No. 2.1.4 was published 10 Jun 2017, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor gitpython for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the gitpython version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.