Threats affecting pkg:pypi/gitpython

GitPython versions from 3.1.30 up to but not including 3.1.47 contain an OS command injection vulnerability. This occurs because certain Python keyword arguments (upload_pack and receive_pack) bypass the library's default blocking of dangerous Git options, allowing attacker-controlled input to lead to arbitrary command execution. The issue is fixed in version 3.1.47. The vulnerability has a high severity with a CVSS score of 8.

GitPython versions prior to 3.1.49 contain a vulnerability in config_writer().set_value() where newline characters in configuration values are not properly validated. This allows an attacker to inject a malicious core.hooksPath configuration, redirecting Git hook execution to an attacker-controlled directory. This persistent repo config poisoning can lead to remote code execution during Git operations that invoke hooks. The issue affects any application passing unsanitized external input to set_value(), such as author_name or author_email fields. A fix is available in GitPython 3.1.49 that rejects values containing CR, LF, or NUL characters.

GitPython versions up to 3.1.46 and the current main branch (3.1.47 locally) have a path traversal vulnerability in their reference APIs. This flaw allows attackers who can supply crafted reference paths to write, overwrite, move, or delete files outside the repository's .git directory due to insufficient validation of reference paths during write, rename, and delete operations. The vulnerability does not require authentication at the library boundary but requires the ability to influence ref names passed to GitPython. A fix is available in version 3.1.48.

GitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn't check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has been addressed in version 3.1.37.