Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitPython: Unpatched Code Can Be Executed by Malicious Input
published 1 month ago
Summary
GitPython, a Python library for interacting with Git repositories, has a vulnerability that could allow malicious code to be executed. This is a concern for users who rely on GitPython for their operations, as it could potentially lead to security breaches. Users are advised to update to a patched version to ensure their security.
What to do
- Update sebastian thiel gitpython to version 3.1.46+aikido.9.
- Update sebastian thiel gitpython to version 3.1.46+aikido.10.
- Update gitpython to version 3.1.46+aikido.10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:PyPI | sebastian thiel | gitpython |
< 3.1.46+aikido.9 < 3.1.46+aikido.10 Fix: upgrade to 3.1.46+aikido.9
|
| Root:PyPI | – | gitpython |
< 3.1.46+aikido.10 Fix: upgrade to 3.1.46+aikido.10
|
Original advisory text
GHSA-3f7w-8rr8-f37f in GitPython - Patched by Root
Root has patched GHSA-3f7w-8rr8-f37f in the GitPython package for Root:PyPI. Multiple fixed versions available.
Timeline
Published22 Sep 2026
Updated22 Sep 2026
First seen6 Aug 2026
Sources
Track software like this
Free during beta