Detections
Analytics
SCA: security update for GitPython (GHSA-539m-9xh6-q6rr)
high Tenable Self-Hosted Container Security Plugin ID 445610
Description
GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()Solution
Update the GitPython library and its related packages to version 3.1.57 or later.See Also
Plugin Details
Severity: High
ID: 445610
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 8/4/2026
Updated: 8/4/2026
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 8/3/2026
Vulnerability Publication Date: 8/3/2026