Threats Tagged 'ghsa-2pxq-5vcg-rq29'

1 threat

Threats Tagged 'ghsa-2pxq-5vcg-rq29'
		Signals				Score and star
High	8.7	EPSS 0.4%	CVE-2026-87817GitPython · Code Injection High8.7EPSS 0.4%2026-09-09CVE Database V5CVE-2026-87817 GitPython versions before 3.1.60 contain a code injection vulnerability due to improper validation of the git directory location. This flaw allows attackers to impersonate the git directory by manipulating tracked files such as gitdir, commondir, and HEAD. Exploitation can lead to arbitrary code execution when a victim calls index.commit() on a cloned or opened repository with a malicious pre-commit hook. EPSS 0.4%Vulnerability gitpython-developers #ghsa-2pxq-5vcg-rq29 #oesa-2026-4026 #openeuler-24-03-lts-sp3	CVE Database V5	2026-09-09

Showing 1–1 of 1 result

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Pro Console Lifetime · Custom feeds · Automations: email, Slack, webhooks, SIEM/MISP · API access (baseline limits)