Alpine/py3-gitpython: critical 9.8
GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options))
Action: Upgrade py3-gitpython to 3.1.49-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.49-r0 | - |
Fixed versions
| 3.1.49-r0 |
Sources
- osv: ALPINE-CVE-2026-42284#Alpine:v3.24/py3-gitpython
- https://security.alpinelinux.org/vuln/CVE-2026-42284
published · modified · JSON