Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitPython package can let attackers run code
published 1 month ago
Summary
The GitPython library used in Python projects has a flaw that could let a malicious user execute arbitrary commands on your system. Update to the latest version of GitPython from PyPI as soon as possible to protect your applications.
What to do
- Update gitpython to version 3.1.46+aikido.13.
- Update sebastian thiel gitpython to version 3.1.46+aikido.11.
- Update gitpython to version 3.1.46+aikido.11.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:PyPI | – | gitpython |
< 3.1.46+aikido.13 < 3.1.46+aikido.11 Fix: upgrade to 3.1.46+aikido.13
|
| Root:PyPI | sebastian thiel | gitpython |
< 3.1.46+aikido.11 Fix: upgrade to 3.1.46+aikido.11
|
Original advisory text
GHSA-w672-239g-c3gr in GitPython - Patched by Root
Root has patched GHSA-w672-239g-c3gr in the GitPython package for Root:PyPI. Multiple fixed versions available.
Timeline
Published22 Sep 2026
Updated22 Sep 2026
First seen16 Sep 2026
Sources
Track software like this
Free during beta