[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-44244":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":62,"aliases":72,"duplicate_of":9,"upstream":85,"downstream":86,"duplicates":102,"related":103,"reserved_at":9,"published_at":108,"modified_at":109,"state":110,"summary":111,"references_raw":119,"kevs":161,"epss":162,"epss_history":165,"metrics":432,"affected":448},"CVE-2026-44244","GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's configparser without validating for newlines. GitPython's own _write() converts embedded newlines into indented continuation lines (e.g. \\n becomes \\n\\t), but Git still accepts an indented [core] stanza as a section header — so the injected core.hooksPath becomes effective configuration. Any Git operation that invokes hooks (commit, merge, checkout) will then execute scripts from the attacker-controlled path. This issue has been patched in version 3.1.49.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-94","Improper Control of Generation of Code ('Code Injection')","The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.","weakness","Draft","Base","Medium",[20,24,58],{"id":21,"name":22,"techniques":23},"CAPEC-242","Code Injection",[],{"id":25,"name":26,"techniques":27},"CAPEC-35","Leverage Executable Code in Non-Executable Files",[28,39,46],{"id":29,"name":30,"tactics":31,"countermeasures":38},"T1027.006","HTML Smuggling",[32,35],{"id":33,"name":34},"TA0030","Defense Evasion",{"id":36,"name":37},"TA0005","Stealth",[],{"id":40,"name":41,"tactics":42,"countermeasures":45},"T1027.009","Embedded Payloads",[43,44],{"id":33,"name":34},{"id":36,"name":37},[],{"id":47,"name":48,"tactics":49,"countermeasures":52},"T1564.009","Resource Forking",[50,51],{"id":33,"name":34},{"id":36,"name":37},[53],{"id":54,"name":55,"tactic":56},"D3-FFV","File Format Verification",{"name":57},"Isolate",{"id":59,"name":60,"techniques":61},"CAPEC-77","Manipulating User-Controlled Variables",[],[63],{"_key":64,"name":65,"source":66,"url":67,"maturity":68,"reliability_score":69,"verified":70,"type":9,"platforms":71,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_GITPYTHON-DEVELOPERS_GITPYTHON","Gitpython","github","https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wfm5-v35h-vwf4","poc",0.3,false,[],[73,74,75,76,77,78,79,80,81,82,83,84],"GHSA-v87r-6q3f-2j67","PYSEC-2026-2163","DEBIAN-CVE-2026-44244","CGA-8crh-m244-369r","CGA-96rq-97g4-wg88","CGA-c9v9-fjmv-7v82","CGA-ff65-mrgr-cpfc","CGA-fw6v-m433-2j58","CGA-jvf2-6rrg-x93g","CGA-qmph-6fq2-6chq","CGA-wqvv-75jc-7cg9","CGA-2375-858m-43vv",[],[87,89,91,93,94,96,98,100],{"_key":88},"OPENSUSE-SU-2026:10758-1",{"_key":90},"UBUNTU-CVE-2026-44244",{"_key":92},"USN-8303-1",{"_key":75},{"_key":95},"SUSE-SU-2026:4072-1",{"_key":97},"RHSA-2026:42078",{"_key":99},"RHSA-2026:42079",{"_key":101},"RHSA-2026:63385",[],[104,105,106],{"_key":88},{"_key":95},{"_key":107},"CGA-3WF6-6W7M-9M2W","2026-05-07T18:22:39.704Z","2026-05-09T03:56:04.115Z","Analyzed",{"cisa_kev":70,"cisa_ransomware":70,"cisa_vendor":9,"epss_severity":112,"epss_score":113,"severity":114,"severity_score":115,"severity_version":116,"severity_source":117,"severity_vector":118,"severity_status":110},"low",0.00237,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[120,135,140,148,152,157],{"url":121,"sources":122,"tags":127},"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67",[123,117,124,125,126],"osv_pypi","nvd","osv_chainguard","osv_wolfi",[128,129,130,131,132,133,134],"WEB","X Refsource CONFIRM","Exploit","Mitigation","Vendor Advisory","EVIDENCE","Advisory",{"url":136,"sources":137,"tags":138},"https://github.com/gitpython-developers/GitPython",[123],[139],"PACKAGE",{"url":141,"sources":142,"tags":143},"https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49",[117,124,123,125,126],[144,128,145,146,147],"X Refsource MISC","Patch","Release Notes","FIX",{"url":149,"sources":150,"tags":151},"https://nvd.nist.gov/vuln/detail/CVE-2026-44244",[123,125,126],[134],{"url":153,"sources":154,"tags":156},"https://security-tracker.debian.org/tracker/CVE-2026-44244",[155],"osv_debian",[134],{"url":158,"sources":159,"tags":160},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44244.json",[125,126],[134],[],{"date":163,"score":113,"percentile":164},"2026-09-19",0.1501,[166,170,173,176,179,182,186,189,192,195,198,201,204,207,210,213,216,218,221,224,227,230,233,236,239,242,245,248,250,253,256,259,263,266,269,272,275,278,281,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,363,365,368,371,374,377,380,382,385,388,391,394,397,400,403,406,409,412,415,418,420,423,425,427,429],{"date":167,"score":168,"percentile":169},"2026-05-08",0.0002,0.05644,{"date":171,"score":168,"percentile":172},"2026-05-09",0.05724,{"date":174,"score":168,"percentile":175},"2026-05-10",0.05741,{"date":177,"score":168,"percentile":178},"2026-05-11",0.05735,{"date":180,"score":168,"percentile":181},"2026-05-12",0.05836,{"date":183,"score":184,"percentile":185},"2026-05-13",0.00023,0.06538,{"date":187,"score":184,"percentile":188},"2026-05-14",0.06552,{"date":190,"score":184,"percentile":191},"2026-05-15",0.06559,{"date":193,"score":184,"percentile":194},"2026-05-16",0.06572,{"date":196,"score":184,"percentile":197},"2026-05-17",0.06566,{"date":199,"score":184,"percentile":200},"2026-05-18",0.06521,{"date":202,"score":184,"percentile":203},"2026-05-19",0.06491,{"date":205,"score":184,"percentile":206},"2026-05-20",0.06451,{"date":208,"score":184,"percentile":209},"2026-05-21",0.06456,{"date":211,"score":184,"percentile":212},"2026-05-22",0.0671,{"date":214,"score":184,"percentile":215},"2026-05-23",0.06706,{"date":217,"score":184,"percentile":215},"2026-05-24",{"date":219,"score":184,"percentile":220},"2026-05-25",0.06692,{"date":222,"score":184,"percentile":223},"2026-05-26",0.06662,{"date":225,"score":184,"percentile":226},"2026-05-27",0.06702,{"date":228,"score":184,"percentile":229},"2026-05-28",0.06811,{"date":231,"score":184,"percentile":232},"2026-05-29",0.06822,{"date":234,"score":184,"percentile":235},"2026-05-30",0.06814,{"date":237,"score":184,"percentile":238},"2026-05-31",0.06801,{"date":240,"score":184,"percentile":241},"2026-06-01",0.06766,{"date":243,"score":184,"percentile":244},"2026-06-02",0.06703,{"date":246,"score":184,"percentile":247},"2026-06-03",0.06653,{"date":249,"score":184,"percentile":223},"2026-06-04",{"date":251,"score":184,"percentile":252},"2026-06-05",0.06694,{"date":254,"score":184,"percentile":255},"2026-06-06",0.06697,{"date":257,"score":184,"percentile":258},"2026-06-07",0.06683,{"date":260,"score":261,"percentile":262},"2026-06-08",0.00026,0.07799,{"date":264,"score":261,"percentile":265},"2026-06-09",0.07815,{"date":267,"score":261,"percentile":268},"2026-06-10",0.07837,{"date":270,"score":261,"percentile":271},"2026-06-11",0.07857,{"date":273,"score":261,"percentile":274},"2026-06-12",0.07894,{"date":276,"score":261,"percentile":277},"2026-06-13",0.07888,{"date":279,"score":261,"percentile":280},"2026-06-14",0.07882,{"date":282,"score":283,"percentile":284},"2026-06-15",0.00194,0.09197,{"date":286,"score":283,"percentile":287},"2026-06-16",0.09214,{"date":289,"score":283,"percentile":290},"2026-06-17",0.09213,{"date":292,"score":283,"percentile":293},"2026-06-18",0.09203,{"date":295,"score":283,"percentile":296},"2026-06-19",0.09175,{"date":298,"score":283,"percentile":299},"2026-06-20",0.09165,{"date":301,"score":283,"percentile":302},"2026-06-21",0.09157,{"date":304,"score":283,"percentile":305},"2026-06-22",0.09147,{"date":307,"score":113,"percentile":308},"2026-06-23",0.14446,{"date":310,"score":113,"percentile":311},"2026-06-24",0.1446,{"date":313,"score":113,"percentile":314},"2026-06-25",0.14551,{"date":316,"score":113,"percentile":317},"2026-06-26",0.14569,{"date":319,"score":113,"percentile":320},"2026-06-27",0.14605,{"date":322,"score":113,"percentile":323},"2026-06-28",0.14574,{"date":325,"score":113,"percentile":326},"2026-06-29",0.1457,{"date":328,"score":113,"percentile":329},"2026-06-30",0.14571,{"date":331,"score":113,"percentile":332},"2026-07-01",0.14654,{"date":334,"score":113,"percentile":335},"2026-07-02",0.1461,{"date":337,"score":113,"percentile":338},"2026-07-03",0.14609,{"date":340,"score":113,"percentile":341},"2026-07-04",0.14612,{"date":343,"score":113,"percentile":344},"2026-07-05",0.1462,{"date":346,"score":113,"percentile":347},"2026-07-06",0.14626,{"date":349,"score":113,"percentile":350},"2026-07-07",0.14621,{"date":352,"score":113,"percentile":353},"2026-07-08",0.14588,{"date":355,"score":113,"percentile":356},"2026-07-09",0.14602,{"date":358,"score":113,"percentile":359},"2026-07-10",0.14613,{"date":361,"score":113,"percentile":362},"2026-07-11",0.14622,{"date":364,"score":113,"percentile":359},"2026-07-12",{"date":366,"score":113,"percentile":367},"2026-07-13",0.14604,{"date":369,"score":113,"percentile":370},"2026-07-14",0.14627,{"date":372,"score":113,"percentile":373},"2026-07-15",0.14631,{"date":375,"score":113,"percentile":376},"2026-07-16",0.14644,{"date":378,"score":113,"percentile":379},"2026-07-17",0.14648,{"date":381,"score":113,"percentile":332},"2026-07-18",{"date":383,"score":113,"percentile":384},"2026-07-19",0.14651,{"date":386,"score":113,"percentile":387},"2026-07-20",0.1475,{"date":389,"score":113,"percentile":390},"2026-07-21",0.14738,{"date":392,"score":113,"percentile":393},"2026-07-22",0.14781,{"date":395,"score":113,"percentile":396},"2026-07-23",0.14768,{"date":398,"score":113,"percentile":399},"2026-07-24",0.1477,{"date":401,"score":113,"percentile":402},"2026-07-25",0.14844,{"date":404,"score":113,"percentile":405},"2026-07-26",0.14833,{"date":407,"score":113,"percentile":408},"2026-07-27",0.14803,{"date":410,"score":113,"percentile":411},"2026-07-28",0.14854,{"date":413,"score":113,"percentile":414},"2026-07-29",0.14841,{"date":416,"score":113,"percentile":417},"2026-07-30",0.14847,{"date":419,"score":113,"percentile":402},"2026-07-31",{"date":421,"score":113,"percentile":422},"2026-08-01",0.14839,{"date":424,"score":113,"percentile":422},"2026-08-02",{"date":426,"score":113,"percentile":414},"2026-08-03",{"date":428,"score":113,"percentile":393},"2026-08-04",{"date":430,"score":113,"percentile":431},"2026-08-05",0.14722,[433,437,440,442,444,446],{"source":123,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":434,"cvss_v4_0":9},{"baseScore":115,"baseSeverity":9,"vectorString":118,"impactScore":435,"exploitabilityScore":436},9.8,4.6,{"source":117,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":438,"cvss_v4_0":9},{"baseScore":115,"baseSeverity":439,"vectorString":118,"impactScore":435,"exploitabilityScore":436},"HIGH",{"source":124,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":441,"cvss_v4_0":9},{"baseScore":115,"baseSeverity":439,"vectorString":118,"impactScore":435,"exploitabilityScore":436},{"source":155,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":443,"cvss_v4_0":9},{"baseScore":115,"baseSeverity":9,"vectorString":118,"impactScore":435,"exploitabilityScore":436},{"source":125,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":445,"cvss_v4_0":9},{"baseScore":115,"baseSeverity":9,"vectorString":118,"impactScore":435,"exploitabilityScore":436},{"source":126,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":447,"cvss_v4_0":9},{"baseScore":115,"baseSeverity":9,"vectorString":118,"impactScore":435,"exploitabilityScore":436},[449,461,467,473,479,485,490,503,512,518],{"ecosystem":450,"name":451,"vendor":452,"product":451,"cpe_part":9,"purl_type":453,"purl_namespace":452,"purl_name":451,"source":9,"versions":454},"Chainguard","awx","chainguard","apk",[455],{"version":456,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":459,"version_end_type":460,"fixed_in":9},"lt24_6_1_r35",true,"ecosystem","24.6.1-r35","excluding",{"ecosystem":450,"name":462,"vendor":452,"product":462,"cpe_part":9,"purl_type":453,"purl_namespace":452,"purl_name":462,"source":9,"versions":463},"datahub-ingestion-fips",[464],{"version":465,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":466,"version_end_type":460,"fixed_in":9},"lt1_5_0_1_r2","1.5.0.1-r2",{"ecosystem":450,"name":468,"vendor":452,"product":468,"cpe_part":9,"purl_type":453,"purl_namespace":452,"purl_name":468,"source":9,"versions":469},"mlflow",[470],{"version":471,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":472,"version_end_type":460,"fixed_in":9},"lt3_16_0_r0","3.16.0-r0",{"ecosystem":450,"name":474,"vendor":452,"product":474,"cpe_part":9,"purl_type":453,"purl_namespace":452,"purl_name":474,"source":9,"versions":475},"mlflow-fips",[476],{"version":477,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":478,"version_end_type":460,"fixed_in":9},"lt3_12_0_r0","3.12.0-r0",{"ecosystem":450,"name":480,"vendor":452,"product":480,"cpe_part":9,"purl_type":453,"purl_namespace":452,"purl_name":480,"source":9,"versions":481},"opal",[482],{"version":483,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":484,"version_end_type":460,"fixed_in":9},"lt0_9_5_r1","0.9.5-r1",{"ecosystem":486,"name":468,"vendor":487,"product":468,"cpe_part":9,"purl_type":453,"purl_namespace":487,"purl_name":468,"source":9,"versions":488},"Wolfi","wolfi",[489],{"version":471,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":472,"version_end_type":460,"fixed_in":9},{"ecosystem":491,"name":492,"vendor":493,"product":492,"cpe_part":9,"purl_type":494,"purl_namespace":493,"purl_name":492,"source":9,"versions":495},"Debian","python-git","debian","deb",[496,498,499,500],{"version":497,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":497,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":497,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":501,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":502,"version_end_type":460,"fixed_in":9},"lt3_1_50_1","3.1.50-1",{"ecosystem":9,"name":504,"vendor":505,"product":504,"cpe_part":506,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":507},"gitpython","gitpython_project","a",[508],{"version":509,"is_range":457,"range_type":510,"version_start":9,"version_start_type":9,"version_end":511,"version_end_type":460,"fixed_in":9},"lt3.1.49","cpe","3.1.49",{"ecosystem":9,"name":513,"vendor":514,"product":504,"cpe_part":506,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":515},"GitPython","gitpython-developers",[516],{"version":517,"is_range":457,"range_type":117,"version_start":9,"version_start_type":9,"version_end":511,"version_end_type":460,"fixed_in":9},"\u003C 3.1.49",{"ecosystem":519,"name":504,"vendor":519,"product":504,"cpe_part":9,"purl_type":520,"purl_namespace":9,"purl_name":504,"source":9,"versions":521},"PyPI","pypi",[522],{"version":523,"is_range":457,"range_type":458,"version_start":9,"version_start_type":9,"version_end":511,"version_end_type":460,"fixed_in":9},"lt3_1_49"]