Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 1 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,098All CVEsplus 18,873 rejected
- 780Last 24 hours3,275 in the last 7 days
- 17,390Last 30 days1,565 of them critical
- 1,766Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 34 | 2 | 0 | 0 | 39 | 42 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2024 | 0 | 1 | 0 | 0 | 0 | 1 | 3 |
| 2023 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-114145 | GitPython validates a submodule's ".git" path only after cloning into it (RCE)gitpython-developers · GitPython | High7.5 |
| CVE-2026-110860 | GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()gitpython-developers · GitPython | Medium6.9 |
| CVE-2026-110859 | GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Namegitpython-developers · GitPython | High8.7 |
| CVE-2026-110858 | GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspecgitpython-developers · GitPython | Critical9.2 |
| CVE-2026-110857 | GitPython before 3.2.0 Command Execution via ls_remote ext:: URLsgitpython-developers · GitPython | High7.7 |
| CVE-2026-110856 | GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dategitpython-developers · GitPython | High8.7 |
| CVE-2026-110855 | GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Namegitpython-developers · GitPython | High7.1 |
| CVE-2026-100689 | GitPython before 3.1.62 Path Traversal via gitmodules pathgitpython-developers · GitPython | High8.7 |
| CVE-2026-87819 | GitPython before 3.1.60 Denial of Service via ReDoSgitpython-developers · GitPython | High8.7 |
| CVE-2026-87818 | GitPython 3.1.59 Local File Content Oracle via --no-indexgitpython-developers · GitPython | High7.1 |
| CVE-2026-87817 | GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonationgitpython-developers · GitPython | High8.7 |
| CVE-2026-78679 | GitPython before 3.1.59 Arbitrary File Read via TagReference.creategitpython-developers · GitPython | High7.1 |
| CVE-2026-78678 | GitPython before 3.1.59 Arbitrary File Read via Repo.blame()gitpython-developers · GitPython | High7.1 |
| CVE-2026-78677 | GitPython before 3.1.59 Path Traversal via separate-git-dirgitpython-developers · GitPython | High8.7 |
| CVE-2026-78676 | GitPython before 3.1.59 Remote Code Execution via Config Injectiongitpython-developers · GitPython | Critical9.3 |
| CVE-2026-78675 | GitPython before 3.1.59 Local File Content Disclosure via .gitmodulesgitpython-developers · GitPython | High8.6 |
| CVE-2026-76222 | GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Namegitpython-developers · GitPython | High8.4 |
| CVE-2026-76221 | GitPython before 3.1.58 Config Injection via option-namegitpython-developers · GitPython | High8.7 |
| CVE-2026-76220 | GitPython before 3.1.58 Command Execution via split_single_char_optionsgitpython-developers · GitPython | High8.7 |
| CVE-2026-76219 | GitPython before 3.1.58 Arbitrary File Overwrite via read-treegitpython-developers · GitPython | High7.2 |
| CVE-2026-76218 | GitPython before 3.1.58 Remote Code Execution via Repo.initgitpython-developers · GitPython | High7.7 |
| CVE-2026-76217 | GitPython before 3.1.58 Arbitrary File Read via pathspec-from-filegitpython-developers · GitPython | High7.1 |
| CVE-2026-73625 | GitPython before 3.1.54 Remote Code Execution via kwarg value smugglinggitpython-developers · GitPython | High8.7 |
| CVE-2026-73624 | GitPython before 3.1.54 Arbitrary File Overwrite via diffgitpython-developers · GitPython | High7.2 |
| CVE-2026-73623 | GitPython before 3.1.54 Remote Code Execution via --templategitpython-developers · GitPython | High7.7 |
| CVE-2026-73622 | GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()gitpython-developers · GitPython | High8.7 |
| CVE-2026-73621 | GitPython before 3.1.56 Arbitrary File Truncation via Commit.countgitpython-developers · GitPython | Medium5.3 |
| CVE-2026-73620 | GitPython before 3.1.57 Arbitrary File Overwrite and Readgitpython-developers · GitPython | High7.2 |
| CVE-2026-73619 | GitPython before 3.1.57 Arbitrary File Read via Repo.archive()gitpython-developers · GitPython | High7.1 |
| CVE-2026-69097 | GitPython before 3.1.53 Config Injection via Submodule Namesgitpython-developers · GitPython | High7.3 |
| CVE-2026-67326 | GitPython before 3.1.50 Newline Injection via config_writer sectiongitpython-developers · GitPython | High7.3 |
| CVE-2026-67324 | GitPython 3.1.50 Authentication Bypass via Joined Short Optionsgitpython-developers · GitPython | Critical9.3 |
| CVE-2026-67323 | GitPython before 3.1.51 Command Injection via unguarded Git optionsgitpython-developers · GitPython | High8.6 |
| CVE-2026-67322 | GitPython before 3.1.52 Environment Variable Exfiltration via clone_fromgitpython-developers · GitPython | High8.7 |
| CVE-2026-67325 | GitPython before 3.1.51 Command Injection via option prefix abbreviationgitpython-developers · GitPython | High8.7 |
| CVE-2026-44243 | GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repositorygitpython-developers · GitPython | High7.8 |
| CVE-2026-44244 | GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPathgitpython-developers · GitPython | High7.8 |
| CVE-2026-42284 | GitPython: Unsafe option check validates multi_options before shlex.split transforms itgitpython-developers · GitPython | High8.1 |
| CVE-2026-42215 | GitPython: Command injection via Git options bypassgitpython-developers · GitPython | High8.8 |
| CVE-2024-22190 | Untrusted search path under some conditions on Windows allows arbitrary code executiongitpython-developers · GitPython | High7.8 |
| CVE-2023-41040 | GitPython blind local file inclusiongitpython-developers · GitPython | Medium4.0 |
| CVE-2023-40590 | Untrusted search path on Windows systems leading to arbitrary code executiongitpython-developers · GitPython | High7.8 |