Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-73624

GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen file paths at process privilege level.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 46.2%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-73624


Contact Us

Shodan ® - All rights reserved