Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitPython may let attackers execute code
published 1 month ago
Summary
The GitPython library used in Python projects can be tricked into running malicious code. This could let an attacker take control of the system where the library is used. Update GitPython to the latest patched version to protect your applications.
What to do
- Update gitpython to version 3.1.58+aikido.3.
- Update gitpython to version 3.1.46+aikido.13.
- Update sebastian thiel gitpython to version 3.1.47+aikido.8.
- Update gitpython to version 3.1.58+aikido.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:PyPI | – | gitpython |
< 3.1.58+aikido.3 < 3.1.46+aikido.13 < 3.1.58+aikido.1 Fix: upgrade to 3.1.58+aikido.3
|
| Root:PyPI | sebastian thiel | gitpython |
< 3.1.47+aikido.8 Fix: upgrade to 3.1.47+aikido.8
|
Original advisory text
GHSA-89ff-m8wv-p99r in GitPython - Patched by Root
Root has patched GHSA-89ff-m8wv-p99r in the GitPython package for Root:PyPI. Multiple fixed versions available.
Timeline
Published22 Sep 2026
Updated22 Sep 2026
First seen18 Sep 2026
Sources
Track software like this
Free during beta