Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-87819

GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic backtracking, exhausting CPU resources for over two minutes per commit access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 20.4%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-87819


Contact Us

Shodan ® - All rights reserved