https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T15:15:26.462743+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110856 CVE-2026-110856 — GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date 2026-10-15T15:15:26.464057+00:00

Affected: gitpython-developers GitPython

GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines. Attackers can serve repositories with commit or tag objects containing long space-filled lines lacking a valid epoch or timezone, causing quadratic backtracking and CPU exhaustion.