[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-44243":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":40,"aliases":50,"duplicate_of":9,"upstream":59,"downstream":60,"duplicates":70,"related":71,"reserved_at":9,"published_at":76,"modified_at":77,"state":78,"summary":79,"references_raw":87,"kevs":129,"epss":130,"epss_history":133,"metrics":409,"affected":431},"CVE-2026-44243","GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory via insufficient validation of reference paths in reference creation, rename, and delete operations. This issue has been patched in version 3.1.48.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-22","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","weakness","Stable","Base","High",[20,24,28,32,36],{"id":21,"name":22,"techniques":23},"CAPEC-126","Path Traversal",[],{"id":25,"name":26,"techniques":27},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":29,"name":30,"techniques":31},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":33,"name":34,"techniques":35},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":37,"name":38,"techniques":39},"CAPEC-79","Using Slashes in Alternate Encoding",[],[41],{"_key":42,"name":43,"source":44,"url":45,"maturity":46,"reliability_score":47,"verified":48,"type":9,"platforms":49,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_GITPYTHON-DEVELOPERS_GITPYTHON","Gitpython","github","https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wfm5-v35h-vwf4","poc",0.3,false,[],[51,52,53,54,55,56,57,58],"GHSA-7545-fcxq-7j24","PYSEC-2026-2162","DEBIAN-CVE-2026-44243","CGA-286q-xfq4-qfxf","CGA-2mfw-v4jg-vcch","CGA-774m-rq82-53pm","CGA-jmrj-95cr-hwfv","CGA-434w-mm7q-chxp",[],[61,63,65,67,68],{"_key":62},"OPENSUSE-SU-2026:10758-1",{"_key":64},"UBUNTU-CVE-2026-44243",{"_key":66},"USN-8303-1",{"_key":53},{"_key":69},"SUSE-SU-2026:4072-1",[],[72,73,74],{"_key":62},{"_key":69},{"_key":75},"CGA-MVV4-4CR5-779J","2026-05-07T18:22:53.622Z","2026-05-07T19:12:49.856Z","Analyzed",{"cisa_kev":48,"cisa_ransomware":48,"cisa_vendor":9,"epss_severity":80,"epss_score":81,"severity":82,"severity_score":83,"severity_version":84,"severity_source":85,"severity_vector":86,"severity_status":78},"low",0.00419,"high",7.8,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",[88,103,108,116,120,125],{"url":89,"sources":90,"tags":95},"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24",[91,85,92,93,94],"osv_pypi","nvd","osv_chainguard","osv_wolfi",[96,97,98,99,100,101,102],"WEB","X Refsource CONFIRM","Exploit","Mitigation","Vendor Advisory","EVIDENCE","Advisory",{"url":104,"sources":105,"tags":106},"https://github.com/gitpython-developers/GitPython",[91],[107],"PACKAGE",{"url":109,"sources":110,"tags":111},"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.48",[85,92,91,93,94],[112,113,114,96,115],"X Refsource MISC","Patch","Release Notes","FIX",{"url":117,"sources":118,"tags":119},"https://nvd.nist.gov/vuln/detail/CVE-2026-44243",[91,93,94],[102],{"url":121,"sources":122,"tags":124},"https://security-tracker.debian.org/tracker/CVE-2026-44243",[123],"osv_debian",[102],{"url":126,"sources":127,"tags":128},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44243.json",[93,94],[102],[],{"date":131,"score":81,"percentile":132},"2026-09-19",0.35881,[134,138,141,144,147,150,154,157,160,163,166,169,172,175,178,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,234,237,240,243,246,249,252,256,259,262,265,268,271,274,277,280,283,286,289,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,346,349,352,355,358,361,364,367,370,373,376,379,382,385,388,391,394,397,400,403,406],{"date":135,"score":136,"percentile":137},"2026-05-08",0.00096,0.26353,{"date":139,"score":136,"percentile":140},"2026-05-09",0.26407,{"date":142,"score":136,"percentile":143},"2026-05-10",0.26372,{"date":145,"score":136,"percentile":146},"2026-05-11",0.26336,{"date":148,"score":136,"percentile":149},"2026-05-12",0.26352,{"date":151,"score":152,"percentile":153},"2026-05-13",0.00108,0.28598,{"date":155,"score":152,"percentile":156},"2026-05-14",0.2862,{"date":158,"score":152,"percentile":159},"2026-05-15",0.28633,{"date":161,"score":152,"percentile":162},"2026-05-16",0.28617,{"date":164,"score":152,"percentile":165},"2026-05-17",0.2859,{"date":167,"score":152,"percentile":168},"2026-05-18",0.28531,{"date":170,"score":152,"percentile":171},"2026-05-19",0.2853,{"date":173,"score":152,"percentile":174},"2026-05-20",0.28529,{"date":176,"score":152,"percentile":177},"2026-05-21",0.28533,{"date":179,"score":180,"percentile":181},"2026-05-22",0.00138,0.33397,{"date":183,"score":180,"percentile":184},"2026-05-23",0.33404,{"date":186,"score":180,"percentile":187},"2026-05-24",0.33378,{"date":189,"score":180,"percentile":190},"2026-05-25",0.33347,{"date":192,"score":180,"percentile":193},"2026-05-26",0.3334,{"date":195,"score":180,"percentile":196},"2026-05-27",0.33406,{"date":198,"score":180,"percentile":199},"2026-05-28",0.335,{"date":201,"score":180,"percentile":202},"2026-05-29",0.33539,{"date":204,"score":180,"percentile":205},"2026-05-30",0.33548,{"date":207,"score":180,"percentile":208},"2026-05-31",0.33529,{"date":210,"score":180,"percentile":211},"2026-06-01",0.33514,{"date":213,"score":180,"percentile":214},"2026-06-02",0.33536,{"date":216,"score":180,"percentile":217},"2026-06-03",0.33525,{"date":219,"score":180,"percentile":220},"2026-06-04",0.33511,{"date":222,"score":180,"percentile":223},"2026-06-05",0.33613,{"date":225,"score":180,"percentile":226},"2026-06-06",0.33627,{"date":228,"score":180,"percentile":229},"2026-06-07",0.33592,{"date":231,"score":232,"percentile":233},"2026-06-08",0.00159,0.36551,{"date":235,"score":232,"percentile":236},"2026-06-09",0.36562,{"date":238,"score":232,"percentile":239},"2026-06-10",0.36595,{"date":241,"score":232,"percentile":242},"2026-06-11",0.36611,{"date":244,"score":232,"percentile":245},"2026-06-12",0.36791,{"date":247,"score":232,"percentile":248},"2026-06-13",0.36815,{"date":250,"score":232,"percentile":251},"2026-06-14",0.36804,{"date":253,"score":254,"percentile":255},"2026-06-15",0.00335,0.25058,{"date":257,"score":254,"percentile":258},"2026-06-16",0.25092,{"date":260,"score":254,"percentile":261},"2026-06-17",0.25108,{"date":263,"score":254,"percentile":264},"2026-06-18",0.25129,{"date":266,"score":254,"percentile":267},"2026-06-19",0.25121,{"date":269,"score":254,"percentile":270},"2026-06-20",0.2511,{"date":272,"score":254,"percentile":273},"2026-06-21",0.25091,{"date":275,"score":254,"percentile":276},"2026-06-22",0.25063,{"date":278,"score":81,"percentile":279},"2026-06-23",0.3343,{"date":281,"score":81,"percentile":282},"2026-06-24",0.33467,{"date":284,"score":81,"percentile":285},"2026-06-25",0.33542,{"date":287,"score":81,"percentile":288},"2026-06-26",0.33585,{"date":290,"score":81,"percentile":291},"2026-06-27",0.33628,{"date":293,"score":81,"percentile":294},"2026-06-28",0.33602,{"date":296,"score":81,"percentile":297},"2026-06-29",0.33603,{"date":299,"score":81,"percentile":300},"2026-06-30",0.33575,{"date":302,"score":81,"percentile":303},"2026-07-01",0.33679,{"date":305,"score":81,"percentile":306},"2026-07-02",0.33709,{"date":308,"score":81,"percentile":309},"2026-07-03",0.33725,{"date":311,"score":81,"percentile":312},"2026-07-04",0.33728,{"date":314,"score":81,"percentile":315},"2026-07-05",0.33742,{"date":317,"score":81,"percentile":318},"2026-07-06",0.33747,{"date":320,"score":81,"percentile":321},"2026-07-07",0.33749,{"date":323,"score":81,"percentile":324},"2026-07-08",0.33754,{"date":326,"score":81,"percentile":327},"2026-07-09",0.33803,{"date":329,"score":81,"percentile":330},"2026-07-10",0.33825,{"date":332,"score":81,"percentile":333},"2026-07-11",0.33859,{"date":335,"score":81,"percentile":336},"2026-07-12",0.33849,{"date":338,"score":81,"percentile":339},"2026-07-13",0.33866,{"date":341,"score":81,"percentile":342},"2026-07-14",0.33886,{"date":344,"score":81,"percentile":345},"2026-07-15",0.33963,{"date":347,"score":81,"percentile":348},"2026-07-16",0.33997,{"date":350,"score":81,"percentile":351},"2026-07-17",0.34003,{"date":353,"score":81,"percentile":354},"2026-07-18",0.34014,{"date":356,"score":81,"percentile":357},"2026-07-19",0.34012,{"date":359,"score":81,"percentile":360},"2026-07-20",0.34089,{"date":362,"score":81,"percentile":363},"2026-07-21",0.34099,{"date":365,"score":81,"percentile":366},"2026-07-22",0.3428,{"date":368,"score":81,"percentile":369},"2026-07-23",0.34283,{"date":371,"score":81,"percentile":372},"2026-07-24",0.34301,{"date":374,"score":81,"percentile":375},"2026-07-25",0.34382,{"date":377,"score":81,"percentile":378},"2026-07-26",0.34379,{"date":380,"score":81,"percentile":381},"2026-07-27",0.34354,{"date":383,"score":81,"percentile":384},"2026-07-28",0.34414,{"date":386,"score":81,"percentile":387},"2026-07-29",0.34432,{"date":389,"score":81,"percentile":390},"2026-07-30",0.34498,{"date":392,"score":81,"percentile":393},"2026-07-31",0.34525,{"date":395,"score":81,"percentile":396},"2026-08-01",0.3453,{"date":398,"score":81,"percentile":399},"2026-08-02",0.34534,{"date":401,"score":81,"percentile":402},"2026-08-03",0.34546,{"date":404,"score":81,"percentile":405},"2026-08-04",0.34521,{"date":407,"score":81,"percentile":408},"2026-08-05",0.34494,[410,418,421,425,427,429],{"source":91,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":411,"cvss_v4_0":416},{"baseScore":412,"baseSeverity":9,"vectorString":413,"impactScore":414,"exploitabilityScore":415},7.1,"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",8.7,4.6,{"baseScore":417,"baseSeverity":9,"vectorString":86,"impactScore":9,"exploitabilityScore":9},8.8,{"source":85,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":419},{"baseScore":83,"baseSeverity":420,"vectorString":86,"impactScore":9,"exploitabilityScore":9},"HIGH",{"source":92,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":422,"cvss_v4_0":423},{"baseScore":412,"baseSeverity":420,"vectorString":413,"impactScore":414,"exploitabilityScore":415},{"baseScore":83,"baseSeverity":420,"vectorString":424,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":123,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":426,"cvss_v4_0":9},{"baseScore":412,"baseSeverity":9,"vectorString":413,"impactScore":414,"exploitabilityScore":415},{"source":93,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":428},{"baseScore":417,"baseSeverity":9,"vectorString":86,"impactScore":9,"exploitabilityScore":9},{"source":94,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":430},{"baseScore":417,"baseSeverity":9,"vectorString":86,"impactScore":9,"exploitabilityScore":9},[432,444,450,456,461,474,483,489],{"ecosystem":433,"name":434,"vendor":435,"product":434,"cpe_part":9,"purl_type":436,"purl_namespace":435,"purl_name":434,"source":9,"versions":437},"Chainguard","awx","chainguard","apk",[438],{"version":439,"is_range":440,"range_type":441,"version_start":9,"version_start_type":9,"version_end":442,"version_end_type":443,"fixed_in":9},"lt24_6_1_r35",true,"ecosystem","24.6.1-r35","excluding",{"ecosystem":433,"name":445,"vendor":435,"product":445,"cpe_part":9,"purl_type":436,"purl_namespace":435,"purl_name":445,"source":9,"versions":446},"datahub-ingestion-fips",[447],{"version":448,"is_range":440,"range_type":441,"version_start":9,"version_start_type":9,"version_end":449,"version_end_type":443,"fixed_in":9},"lt1_5_0_1_r2","1.5.0.1-r2",{"ecosystem":433,"name":451,"vendor":435,"product":451,"cpe_part":9,"purl_type":436,"purl_namespace":435,"purl_name":451,"source":9,"versions":452},"mlflow",[453],{"version":454,"is_range":440,"range_type":441,"version_start":9,"version_start_type":9,"version_end":455,"version_end_type":443,"fixed_in":9},"lt3_16_0_r0","3.16.0-r0",{"ecosystem":457,"name":451,"vendor":458,"product":451,"cpe_part":9,"purl_type":436,"purl_namespace":458,"purl_name":451,"source":9,"versions":459},"Wolfi","wolfi",[460],{"version":454,"is_range":440,"range_type":441,"version_start":9,"version_start_type":9,"version_end":455,"version_end_type":443,"fixed_in":9},{"ecosystem":462,"name":463,"vendor":464,"product":463,"cpe_part":9,"purl_type":465,"purl_namespace":464,"purl_name":463,"source":9,"versions":466},"Debian","python-git","debian","deb",[467,469,470,471],{"version":468,"is_range":440,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":468,"is_range":440,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":468,"is_range":440,"range_type":441,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":472,"is_range":440,"range_type":441,"version_start":9,"version_start_type":9,"version_end":473,"version_end_type":443,"fixed_in":9},"lt3_1_50_1","3.1.50-1",{"ecosystem":9,"name":475,"vendor":476,"product":475,"cpe_part":477,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":478},"gitpython","gitpython_project","a",[479],{"version":480,"is_range":440,"range_type":481,"version_start":9,"version_start_type":9,"version_end":482,"version_end_type":443,"fixed_in":9},"lt3.1.48","cpe","3.1.48",{"ecosystem":9,"name":484,"vendor":485,"product":475,"cpe_part":477,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":486},"GitPython","gitpython-developers",[487],{"version":488,"is_range":440,"range_type":85,"version_start":9,"version_start_type":9,"version_end":482,"version_end_type":443,"fixed_in":9},"\u003C 3.1.48",{"ecosystem":490,"name":475,"vendor":490,"product":475,"cpe_part":9,"purl_type":491,"purl_namespace":9,"purl_name":475,"source":9,"versions":492},"PyPI","pypi",[493],{"version":494,"is_range":440,"range_type":441,"version_start":9,"version_start_type":9,"version_end":482,"version_end_type":443,"fixed_in":9},"lt3_1_48"]