PyPI/gitpython CVE-2023-41040: medium 6.5, EPSS 1.09%
GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file bein
Action: Upgrade gitpython to 3.1.35 or later.
pip install gitpython==3.1.35Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.35 | - |
Fixed versions
| 3.1.35 |
Sources
- osv: PYSEC-2023-165
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c
- https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175
CVE-2023-41040 · published · modified · JSON