{"items":[{"id":"CVE-2026-87817","published":"2026-09-09T11:21:04.007Z","updated":"2026-10-08T15:25:56.195Z","title":"GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation","severity":"HIGH","score":8.7,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-44244","published":"2026-05-07T18:22:39.704Z","updated":"2026-05-09T03:56:04.115Z","title":"GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath","severity":"HIGH","score":7.8,"vendor":"gitpython-developers","product":"GitPython","kev":false,"epss":0.00237,"kevAdded":null}]}