CVE-2026-67323 | gitpython-developers GitPython up to 3.1.50 command injection

A vulnerability, which was classified as critical, has been found in gitpython-developers GitPython up to 3.1.50. The affected element is the function Repo.archive/git.ls_remote/Repo.iter_commits/Repo.blame. Performing a manipulation results in command injection.

This vulnerability is identified as CVE-2026-67323. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More