CVE-2026-100689
1 advisory.
PyPI/gitpython CVE-2026-100689: medium
GitPython submodule update path traversal can write outside the repository
Action: Upgrade gitpython to 3.1.62 or later.
pip install gitpython==3.1.62Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.62 | - |
Fixed versions
| 3.1.62 |
Sources
- osv: GHSA-59cr-6r3x-644w
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-59cr-6r3x-644w
- https://github.com/gitpython-developers/GitPython/pull/2225
- https://github.com/gitpython-developers/GitPython/commit/1ed0ebc2f2e74d979cdc367a4864a7731fdcc093
- https://github.com/gitpython-developers/GitPython
- https://github.com/gitpython-developers/GitPython/releases/tag/3.1.62
CVE-2026-100689 · published · modified · JSON