7.8
CVSSv3

CVE-2024-22190

Published: 11/01/2024 Updated: 18/01/2024
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to interpret hooks. If either of those features are used on Windows, a malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41.

Vulnerable Product Search on Vulmon Subscribe to Product

gitpython project gitpython

Github Repositories

Personal use library to "manage" my poetry-based package maintenance tasks.

Manage Introduction In learning how to perform releases to PyPI, I became somewhat "disenchanted" by all the various manual steps and required In the spirit of GTD, a Makefile (or personal favorite Justfile) was a good starting point However, even these left something to be desired which led me to Thomas Feldman's managepy environment I wanted to combine the