Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/python-git@3.1.50-1?distro=trixie
purl pkg:deb/debian/python-git@3.1.50-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (9)
Vulnerability Summary Aliases
VCID-2z23-b3zg-wuh5 CVE-2026-44244
GHSA-v87r-6q3f-2j67
VCID-fp8f-ckcg-47a1 CVE-2026-44243
GHSA-7545-fcxq-7j24
VCID-hph8-mnnk-v7ft CVE-2026-42215
GHSA-rpm5-65cw-6hj4
VCID-prtd-77t4-37er CVE-2023-41040
GHSA-cwvm-v4w8-q58c
PYSEC-2023-165
VCID-r172-bxav-a3ez CVE-2023-40590
GHSA-wfm5-v35h-vwf4
PYSEC-2023-161
VCID-v1x7-st14-rfc1 CVE-2023-40267
GHSA-pr76-5cm5-w9cj
PYSEC-2023-137
VCID-vuj4-7vfk-9fhy GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to interpret hooks. If either of those features are used on Windows, a malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41. CVE-2024-22190
GHSA-2mqj-m65w-jghx
PYSEC-2024-4
VCID-yvgm-nrme-tfgp CVE-2026-42284
GHSA-x2qx-6953-8485
VCID-z2pz-21y4-5khp CVE-2022-24439
GHSA-hcpj-qp55-gfph
PYSEC-2022-42992

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-11T21:14:56.020692+00:00 Debian Importer Fixing VCID-2z23-b3zg-wuh5 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-11T21:14:55.993274+00:00 Debian Importer Fixing VCID-fp8f-ckcg-47a1 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-11T21:14:55.964634+00:00 Debian Importer Fixing VCID-yvgm-nrme-tfgp https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-11T21:14:55.936685+00:00 Debian Importer Fixing VCID-hph8-mnnk-v7ft https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-11T21:14:55.901349+00:00 Debian Importer Fixing VCID-vuj4-7vfk-9fhy https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-11T21:14:55.854608+00:00 Debian Importer Fixing VCID-prtd-77t4-37er https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-11T21:14:55.813761+00:00 Debian Importer Fixing VCID-r172-bxav-a3ez https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-11T21:14:55.761808+00:00 Debian Importer Fixing VCID-v1x7-st14-rfc1 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-11T21:14:55.712790+00:00 Debian Importer Fixing VCID-z2pz-21y4-5khp https://security-tracker.debian.org/tracker/data/json 38.6.0