Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,126All CVEsplus 19,141 rejected
- 319Last 24 hours3,316 in the last 7 days
- 16,921Last 30 days1,560 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 34 | 2 | 0 | 0 | 39 | 42 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 3 |
| 2024 | 0 | 1 | 0 | 0 | 0 | 1 | 3 |
| 2023 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-114145 | GitPython validates a submodule's ".git" path only after cloning into it (RCE)gitpython-developers · GitPython | High7.5 |
| CVE-2026-110860 | GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()Public exploitgitpython-developers · GitPython | Medium6.9 |
| CVE-2026-110859 | GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch NamePublic exploitgitpython-developers · GitPython | High8.7 |
| CVE-2026-110858 | GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspecgitpython-developers · GitPython | Critical9.2 |
| CVE-2026-110857 | GitPython before 3.2.0 Command Execution via ls_remote ext:: URLsgitpython-developers · GitPython | High7.7 |
| CVE-2026-110856 | GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_datePublic exploitgitpython-developers · GitPython | High8.7 |
| CVE-2026-110855 | GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule NamePublic exploitgitpython-developers · GitPython | High7.1 |
| CVE-2026-100689 | GitPython before 3.1.62 Path Traversal via gitmodules pathgitpython-developers · GitPython | High8.7 |
| CVE-2026-87819 | GitPython before 3.1.60 Denial of Service via ReDoSgitpython-developers · GitPython | High8.7 |
| CVE-2026-87818 | GitPython 3.1.59 Local File Content Oracle via --no-indexPublic exploitgitpython-developers · GitPython | High7.1 |
| CVE-2026-87817 | GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonationgitpython-developers · GitPython | High8.7 |
| CVE-2026-78679 | GitPython before 3.1.59 Arbitrary File Read via TagReference.createPublic exploitgitpython-developers · GitPython | High7.1 |
| CVE-2026-78678 | GitPython before 3.1.59 Arbitrary File Read via Repo.blame()Public exploitgitpython-developers · GitPython | High7.1 |
| CVE-2026-78677 | GitPython before 3.1.59 Path Traversal via separate-git-dirPublic exploitgitpython-developers · GitPython | High8.7 |
| CVE-2026-78676 | GitPython before 3.1.59 Remote Code Execution via Config Injectiongitpython-developers · GitPython | Critical9.3 |
| CVE-2026-78675 | GitPython before 3.1.59 Local File Content Disclosure via .gitmodulesPublic exploitgitpython-developers · GitPython | High8.6 |
| CVE-2026-76222 | GitPython before 3.1.58 Path Traversal via .gitmodules Submodule NamePublic exploitgitpython-developers · GitPython | High8.4 |
| CVE-2026-76221 | GitPython before 3.1.58 Config Injection via option-namegitpython-developers · GitPython | High8.7 |
| CVE-2026-76220 | GitPython before 3.1.58 Command Execution via split_single_char_optionsgitpython-developers · GitPython | High8.7 |
| CVE-2026-76219 | GitPython before 3.1.58 Arbitrary File Overwrite via read-treegitpython-developers · GitPython | High7.2 |
| CVE-2026-76218 | GitPython before 3.1.58 Remote Code Execution via Repo.initgitpython-developers · GitPython | High7.7 |
| CVE-2026-76217 | GitPython before 3.1.58 Arbitrary File Read via pathspec-from-filePublic exploitgitpython-developers · GitPython | High7.1 |
| CVE-2026-73625 | GitPython before 3.1.54 Remote Code Execution via kwarg value smugglinggitpython-developers · GitPython | High8.7 |
| CVE-2026-73624 | GitPython before 3.1.54 Arbitrary File Overwrite via diffPublic exploitgitpython-developers · GitPython | High7.2 |
| CVE-2026-73623 | GitPython before 3.1.54 Remote Code Execution via --templatePublic exploitgitpython-developers · GitPython | High7.7 |
| CVE-2026-73622 | GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()Public exploitgitpython-developers · GitPython | High8.7 |
| CVE-2026-73621 | GitPython before 3.1.56 Arbitrary File Truncation via Commit.countgitpython-developers · GitPython | Medium5.3 |
| CVE-2026-73620 | GitPython before 3.1.57 Arbitrary File Overwrite and ReadPublic exploitgitpython-developers · GitPython | High7.2 |
| CVE-2026-73619 | GitPython before 3.1.57 Arbitrary File Read via Repo.archive()Public exploitgitpython-developers · GitPython | High7.1 |
| CVE-2026-69097 | GitPython before 3.1.53 Config Injection via Submodule NamesPublic exploitgitpython-developers · GitPython | High7.3 |
| CVE-2026-67326 | GitPython before 3.1.50 Newline Injection via config_writer sectionPublic exploitgitpython-developers · GitPython | High7.3 |
| CVE-2026-67324 | GitPython 3.1.50 Authentication Bypass via Joined Short Optionsgitpython-developers · GitPython | Critical9.3 |
| CVE-2026-67323 | GitPython before 3.1.51 Command Injection via unguarded Git optionsPublic exploitgitpython-developers · GitPython | High8.6 |
| CVE-2026-67322 | GitPython before 3.1.52 Environment Variable Exfiltration via clone_fromPublic exploitgitpython-developers · GitPython | High8.7 |
| CVE-2026-67325 | GitPython before 3.1.51 Command Injection via option prefix abbreviationPublic exploitgitpython-developers · GitPython | High8.7 |
| CVE-2026-44243 | GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repositoryPublic exploitgitpython-developers · GitPython | High7.8 |
| CVE-2026-44244 | GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPathPublic exploitgitpython-developers · GitPython | High7.8 |
| CVE-2026-42284 | GitPython: Unsafe option check validates multi_options before shlex.split transforms itPublic exploitgitpython-developers · GitPython | High8.1 |
| CVE-2026-42215 | GitPython: Command injection via Git options bypassPublic exploitgitpython-developers · GitPython | High8.8 |
| CVE-2024-22190 | Untrusted search path under some conditions on Windows allows arbitrary code executionPublic exploitgitpython-developers · GitPython | High7.8 |
| CVE-2023-41040 | GitPython blind local file inclusionPublic exploitgitpython-developers · GitPython | Medium4.0 |
| CVE-2023-40590 | Untrusted search path on Windows systems leading to arbitrary code executionPublic exploitgitpython-developers · GitPython | High7.8 |