vulnerability
Ubuntu: USN-5968-1 (CVE-2022-24439): GitPython vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Dec 6, 2022 | Mar 22, 2023 | Apr 16, 2026 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Dec 6, 2022
Added
Mar 22, 2023
Modified
Apr 16, 2026
Description
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.
Solutions
ubuntu-pro-upgrade-python-gitubuntu-pro-upgrade-python3-gitubuntu-upgrade-python3-git
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.