Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-sz7f-e4sp-y3aq
Vulnerability ID VCID-sz7f-e4sp-y3aq
Aliases GHSA-x2qx-6953-8485
Summary GitPython: Unsafe option check validates multi_options before shlex.split transformation
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
System Score Found at
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-x2qx-6953-8485
cvssv3.1_qr HIGH https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485
Reference id Reference type URL
GHSA-x2qx-6953-8485 https://github.com/advisories/GHSA-x2qx-6953-8485
GHSA-x2qx-6953-8485 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485
No exploits are available.

No EPSS data available for this vulnerability.

Date Actor Action Source VulnerableCode Version
2026-04-26T22:37:26.044959+00:00 GHSA Importer Import https://github.com/advisories/GHSA-x2qx-6953-8485 38.4.0