https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T20:50:09.100518+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110857 CVE-2026-110857 — GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs 2026-10-15T20:50:09.102424+00:00

Affected: gitpython-developers GitPython

GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_remote forwards URLs without check_unsafe_protocols validation. Attackers can supply ext:: remote-helper URLs to execute commands when git permits the ext transport, while merge_base and IndexFile.move also accept unguarded option injection.