PyPI/gitpython CVE-2024-22190: high 7.8, EPSS 0.32%

Untrusted search path under some conditions on Windows allows arbitrary code execution

Action: Upgrade gitpython to 3.1.41 or later.

pip install gitpython==3.1.41

Affected

Fixed versions

Sources

• osv: GHSA-2mqj-m65w-jghx
• https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2mqj-m65w-jghx
• https://nvd.nist.gov/vuln/detail/CVE-2024-22190
• https://github.com/gitpython-developers/GitPython/pull/1792
• https://github.com/gitpython-developers/GitPython/commit/ef3192cc414f2fd9978908454f6fd95243784c7f
• https://github.com/gitpython-developers/GitPython
• https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2024-4.yaml

CVE-2024-22190 · published 2024-01-10T15:46:00Z · modified 2026-09-10T03:50:04.639399145Z · JSON