CVE WATCH / VULNERABILITY DETAIL
CVE-2026-114145
HIGHCVSS 7.5NVD feed
Published 21 October 2026 · tracked since 22 October 2026
Description
GitPython is a python library used to interact with Git repositories. Prior to 3.2.1, create_submodule() in git/objects/submodule/base.py accepts an attacker-influenced submodule path such as .git/hooks and invokes _clone_repo() before safely rejecting the destination. In 3.1.x, _validate_repo_path(
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-114724 HIGH 7.4
- CVE-2026-114715 MEDIUM 6.8
- CVE-2026-114658 HIGH 8.8
- CVE-2026-114636 HIGH 8.7
- CVE-2026-114638 HIGH 8.7
- CVE-2026-114640 HIGH 8.7
- CVE-2026-114577 HIGH 7.3
- CVE-2026-12664 MEDIUM 6.8
- CVE-2026-15723 HIGH 8.2
- CVE-2026-110264 CRITICAL 10