[Git][security-tracker-team/security-tracker][master] Add new python-git issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0bd2687e by Salvatore Bonaccorso at 2026-08-01T22:18:10+02:00
Add new python-git issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -52,15 +52,20 @@ CVE-2026-67328 (@better-auth/sso versions before 1.6.21 contain multiple authent
 CVE-2026-67327 (better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions > ...)
 	NOT-FOR-US: Better Auth
 CVE-2026-67326 (GitPython before 3.1.50 fails to validate newline characters in the se ...)
-	TODO: check
+	- python-git 3.1.50-1
+	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w
 CVE-2026-67325 (GitPython before 3.1.51 contains an incomplete command injection block ...)
-	TODO: check
+	- python-git <unfixed>
+	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx
 CVE-2026-67324 (GitPython 3.1.50 fails to recognize joined short-option forms such as  ...)
-	TODO: check
+	- python-git <unfixed>
+	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v396-v7q4-x2qj
 CVE-2026-67323 (GitPython before 3.1.51 fails to guard against dangerous Git options p ...)
-	TODO: check
+	- python-git <unfixed>
+	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v
 CVE-2026-67322 (GitPython before 3.1.52 is vulnerable to environment-variable exfiltra ...)
-	TODO: check
+	- python-git <unfixed>
+	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573
 CVE-2026-67321 (axios before 0.33.0 contains an incomplete depth-limit bypass in toFor ...)
 	TODO: check
 CVE-2026-67320 (axios in a Node.js deployment using the HTTP adapter can route request ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0bd2687e48bc17c8e3eb26a010be84bc0143c178

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0bd2687e48bc17c8e3eb26a010be84bc0143c178
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260801/482deff2/attachment.htm>