Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --upload-pack and --receive-pack by default, but the equivalent Python kwargs upload_pack and receive_pack bypass that check. If an application passes attacker-controlled kwargs into Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(), this leads to arbitrary command execution even when allow_unsafe_options is left at its default value of False. This issue has been patched in version 3.1.47.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-07 | 2 | Disclosure1General1 |
| 2026-05-08 | 1 | Disclosure1 |
| 2026-05-09 | 1 | Disclosure1 |
| 2026-09-09 | 1 | General1 |
🟠 GitPython, Arbitrary File Read via Unsafe Option Forwarding, #CVE-2026-42215 (Medium) -DC-Sep2026-2248 https://dailycve.com/gitpython-arbitrary-file-read-via-unsafe-option-forwarding-cve-2026-42215-medium-dc-sep2026-2248/
Post summary
The post merely announces the CVE with minimal details and lacks any actionable technical or mitigation information.
🔴 GitPython, Configuration Injection, #CVE-2026-42215 Bypass (High) https://dailycve.com/gitpython-configuration-injection-cve-2026-42215-bypass-high/
Post summary
A new GitPython configuration injection vulnerability, CVE-2026-42215, has been disclosed as a high severity issue.
CVE-2026-42215 Remote Code Execution in GitPython 3.1.30 Through 3.1.46 ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42215 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet references CVE-2026-42215, noting a remote code execution flaw affecting specific GitPython versions, but provides no additional details such as a PoC, exploit code, patch, or evidence of active exploitation.
🚨*CVE* CVE-2026-42215 GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --u… https://www.cve.org/CVERecord?id=CVE-2026-42215 ----- Traducción: CVE-2026-42215 Git… http://infoflow.cloud`
Post summary
The tweet merely announces CVE‑2026‑42215 for GitPython, noting it blocks certain dangerous Git options, with no evidence of exploits, patches, or activity.
CVE-2026-42215 GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --u… https://www.cve.org/CVERecord?id=CVE-2026-42215
Post summary
The text announces a CVE in GitPython that affects versions 3.1.30‑3.1.46 by blocking dangerous Git options, without mentioning exploits, patches, or in‑the‑wild activity.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gitpython_project | gitpython | - | python | - |