gitpython@3.1.34 vulnerabilities
GitPython is a Python library used to interact with Git repositories
-
latest version
3.1.43
-
latest non vulnerable version
-
first published
14 years ago
-
latest version published
a month ago
-
licenses detected
- [0.1.7,3.1.41)
Direct Vulnerabilities
Known vulnerabilities in the gitpython package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Untrusted Search Path via the use of an untrusted search path on Windows. An attacker can execute arbitrary code by placing a malicious Notes:
How to fix Untrusted Search Path? Upgrade |
[,3.1.41)
|
GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Directory Traversal due to improper validation of the final path. Although this vulnerability cannot be used to read the contents of files, it could potentially be used to trigger a denial of service for the program. How to fix Directory Traversal? Upgrade |
[,3.1.35)
|