{"items":[{"id":"CVE-2026-73625","published":"2026-08-13T11:28:24.833Z","updated":"2026-10-08T15:24:45.864Z","title":"GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling","severity":"HIGH","score":8.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00676,"kevAdded":null},{"id":"CVE-2026-73623","published":"2026-08-13T11:28:23.477Z","updated":"2026-10-08T15:24:44.174Z","title":"GitPython before 3.1.54 Remote Code Execution via --template","severity":"HIGH","score":7.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00961,"kevAdded":null},{"id":"CVE-2026-67324","published":"2026-08-01T12:22:18.154Z","updated":"2026-10-08T15:24:05.735Z","title":"GitPython 3.1.50 Authentication Bypass via Joined Short Options","severity":"CRITICAL","score":9.3,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00454,"kevAdded":null},{"id":"CVE-2026-67325","published":"2026-08-01T12:22:16.817Z","updated":"2026-10-08T15:24:06.398Z","title":"GitPython before 3.1.51 Command Injection via option prefix abbreviation","severity":"HIGH","score":8.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.02209,"kevAdded":null},{"id":"CVE-2026-42215","published":"2026-05-07T18:17:03.194Z","updated":"2026-05-09T03:56:00.861Z","title":"GitPython: Command injection via Git options bypass","severity":"HIGH","score":8.8,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00749,"kevAdded":null}]}