Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options)). A string like "--branch main --config core.hooksPath=/x" passes validation (starts with --branch), but after split becomes ["--branch", "main", "--config", "core.hooksPath=/x"]. Git applies the config and executes attacker hooks during clone. This issue has been patched in version 3.1.47.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-42284 Command Injection in GitPython Prior to Version 3.1.47 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42284
Post summary
The text announces a command injection vulnerability in GitPython before v3.1.47, linking to a Vulmon detail page but providing no PoC, exploit code, or patch information.
CVE-2026-42284 GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes sh… https://www.cve.org/CVERecord?id=CVE-2026-42284
Post summary
The text announces CVE‑2026‑42284, describing how GitPython’s _clone() improperly validates options and executes a shell command, and notes that the issue is fixed in version 3.1.47.
🚨*CVE* CVE-2026-42284 GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes sh… https://www.cve.org/CVERecord?id=CVE-2026-42284 ----- Traducción: CVE-2026-42284 Git… http://infoflow.cloud`
Post summary
The text references CVE-2026-42284 with a brief technical hint but provides no PoC, exploit details, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gitpython_project | gitpython | - | python | - |