GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules. While a prior fix (GHSA-hmq2-w58f-27jc) added Submodule._validated_name() ...

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove() and Head.checkout(). Attackers can supply --pathspec-from-file and --pathspec ...

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack vector: More severe the more the remote (logically and ...

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can ...

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack Vector: This metric reflects the context by which vulnerability ...

原创 最新推荐文章于 2026-07-09 16:40:36 发布 · 1.5w 阅读 本文详细介绍了如何在线和离线安装GitPython，以及如何使用GitPython进行克隆、添加邮箱、执行git操作等。重点讲解了命令参数转换规则，并 ...

【免费下载链接】GitPython GitPython is a python library used to interact with Git repositories. 项目地址: https://gitcode.com/gh_mirrors/gi/GitPython ...