{"action":"Upgrade gitpython to 3.1.54 or later.","affected":[{"fixed":"3.1.54","introduced":"0"}],"component":"gitpython","cve_ids":["CVE-2026-73623"],"ecosystem":"PyPI","epss":0.00835,"exploited":false,"fixed_versions":["3.1.54"],"ghsa_id":"GHSA-6p8h-3wgx-97gf","id":"tcs_01M5KF3VS3PVR1VWRQXPC3P3V8","modified_at":"2026-09-10T13:11:03.995690741Z","published_at":"2026-07-24T16:42:09Z","references":["https://osv.dev/vulnerability/GHSA-6p8h-3wgx-97gf","https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf","https://github.com/gitpython-developers/GitPython/pull/2180","https://github.com/gitpython-developers/GitPython/commit/ffcb5359e87619f4fe4a70a4aff5f08c5580ba97","https://github.com/gitpython-developers/GitPython","https://github.com/gitpython-developers/GitPython/releases/tag/3.1.54"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6p8h-3wgx-97gf","url":"https://osv.dev/vulnerability/GHSA-6p8h-3wgx-97gf"}],"summary":"GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks"}