{"items":[{"id":"CVE-2026-100689","published":"2026-09-26T13:23:48.759Z","updated":"2026-10-08T15:21:59.548Z","title":"GitPython before 3.1.62 Path Traversal via gitmodules path","severity":"HIGH","score":8.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2026-78677","published":"2026-08-25T01:30:34.719Z","updated":"2026-10-08T15:25:08.424Z","title":"GitPython before 3.1.59 Path Traversal via separate-git-dir","severity":"HIGH","score":8.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00651,"kevAdded":null},{"id":"CVE-2026-76222","published":"2026-08-19T14:02:05.596Z","updated":"2026-10-08T15:25:02.909Z","title":"GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name","severity":"HIGH","score":8.4,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2026-73620","published":"2026-08-13T11:28:21.426Z","updated":"2026-10-08T15:24:41.248Z","title":"GitPython before 3.1.57 Arbitrary File Overwrite and Read","severity":"HIGH","score":7.2,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2026-44243","published":"2026-05-07T18:22:53.622Z","updated":"2026-05-07T19:12:49.856Z","title":"GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository","severity":"HIGH","score":7.8,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2023-41040","published":"2023-08-30T21:07:42.263Z","updated":"2025-11-03T21:49:29.315Z","title":"GitPython blind local file inclusion","severity":"MEDIUM","score":4,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.01093,"kevAdded":null}]}