CVE-2026-110857 | gitpython-developers GitPython up to 3.1.x Remote Helper/Index File Git.ls_remote/merge_base/IndexFile.move injection

October 15, 2026 Yanac

A vulnerability has been found in gitpython-developers GitPython up to 3.1.x and classified as critical. This vulnerability affects the function Git.ls_remote/merge_base/IndexFile.move of the component Remote Helper/Index File. Performing a manipulation results in injection.

This vulnerability was named CVE-2026-110857. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More