{"items":[{"id":"CVE-2026-110855","published":"2026-10-14T22:52:34.854Z","updated":"2026-10-15T18:15:45.736Z","title":"GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name","severity":"HIGH","score":7.1,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2026-73622","published":"2026-08-13T11:28:22.807Z","updated":"2026-10-08T15:24:42.969Z","title":"GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()","severity":"HIGH","score":8.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2026-67322","published":"2026-08-01T12:22:17.009Z","updated":"2026-08-14T16:50:51.427Z","title":"GitPython before 3.1.52 Environment Variable Exfiltration via clone_from","severity":"HIGH","score":8.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00328,"kevAdded":null}]}