CVE-2026-114145
HighAdvisory
Published 22 Oct 2026In the index since 23 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.003
- 17th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 28
- of 18,232 indexed, latest versions
- Container images
- 38
- deployed by those charts
- Fix available
- 1 of 1
- affected package
GitPython validates a submodule's ".git" path only after cloning into it (RCE)
Carried by container images the latest versions of 28 of 18,232 indexed charts deploy, on 38 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gitpythonpypi | 3.1.11, 3.1.17, 3.1.18, 3.1.29+11 more | 3.2.1 | 38 |
- OSV records
- GHSA-83vg-56qc-22m7
Charts affected
28 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| mlflowcommunity-chartsVerified publisher | 1.11.7 | 1 of 1See more | 1,404 |
| ambassadordatawire | 6.9.5 | 1 of 2See more | 5,702 |
| emissary-ingressdatawire | 7.1.8-ea | 1 of 1See more | 6,433 |
| edge-stackdatawire | 7.1.8-ea | 1 of 2See more | 6,864 |
| stackstorm-hastackstormVerified publisher | 1.1.0 | 11 of 17See more | 729,594 |
| nautobotnautobotOfficialVerified publisher | 3.2.0 | 1 of 1See more | 5,723 |
| daskhubdask | 2024.1.1 | 1 of 9See more | 18,364 |
| mlflowgetindataVerified publisher | 0.1.2 | 1 of 1See more | 2,972 |
| squestchristianhuthVerified publisher | 7.0.4 | 1See more | — |
| cosmotech-copilot-apicosmotech-apiVerified publisher | 0.1.1 | 1 of 1See more | 13,460 |
| deepstackgeek-cookbookVerified publisher | 1.5.2 | 1 of 2See more | 7,357 |
| helmuphelmupVerified publisher | 0.1.0 | 2 of 3See more | 19,433 |
| mlflow-controllermlflow-deployment-controller | 0.1.8 | 2 of 2See more | 10,513 |
| mlflow-servermlflowserver | 0.1.9 | 1 of 3See more | 7,704 |
| streamlit-appstreamlit-appVerified publisher | 0.2.0 | 1 of 1See more | 2,308 |
| csgshipcsghubVerified publisher | 0.4.7 | 1 of 10See more | 15,157 |
| jupyterhubd4nVerified publisher | 3.3.7 | 1 of 7See more | 89,458 |
| skypilotgeek-cookbookVerified publisher | 0.0.1 | 1 of 3See more | 12,151 |
| fastmcp-serverhelmforgeVerified publisher | 1.7.5 | 1 of 1See more | 3,948 |
| mcp-serverhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 4,085 |
| ilum-streamlitilumVerified publisher | 0.1.0 | 1 of 1See more | 3,484 |
| erpnextimprowisedVerified publisher | 3.3.0 | 1 of 3See more | 8,414 |
| aperagkubeblocksVerified publisher | 0.0.0-nightly | 1 of 3See more | 10,010 |
| mlflowmondata-helm-chartsVerified publisher | 0.2.3 | 1 of 1See more | 4,454 |
| mlflowncsaVerified publisher | 1.2.1 | 1 of 4See more | 6,835 |
| checkmkrtomik-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 9,934 |
| ambassadorwener | 6.9.5 | 1 of 2See more | 5,702 |
| ambassadorwenerme | 6.9.5 | 1 of 2See more | 5,702 |
Container images carrying it
38 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| datawire/ | 8588eafe6862 | gitpython | 3.2.1 | 3 |
| apecloud/ | 8ac9947a2c84 | gitpython | 3.2.1 | 1 |
| aristidetm/ | 469dbc951224 | gitpython | 3.2.1 | 1 |
| berkeleyskypilot/ | 8da2f3cda472 | gitpython | 3.2.1 | 1 |
| buntha/ | 154542cc3083 | gitpython | 3.2.1 | 1 |
| burakince/ | ab4b566644b9 | gitpython | 3.2.1 | 1 |
| checkmk/ | c11b422210c4 | gitpython | 3.2.1 | 1 |
| datawire/ | 07f8fe4f4f8e | gitpython | 3.2.1 | 1 |
| datawire/ | 9716efbdd24b | gitpython | 3.2.1 | 1 |
| evk02/ | ef6ff257ef35 | gitpython | 3.2.1 | 1 |
| helmforge/ | 61f759a1421f | gitpython | 3.2.1 | 1 |
| helmforge/ | fcb7017327d6 | gitpython | 3.2.1 | 1 |
| ilum/ | ce5dcdeb22ba | gitpython | 3.2.1 | 1 |
| improwised/ | 97280b55cbd4 | gitpython | 3.2.1 | 1 |
| mondata/ | 6f94c6caf8bf | gitpython | 3.2.1 | 1 |
| networktocode/ | ed484336b1ad | gitpython | 3.2.1 | 1 |
| opencsghq/ | c36a5bac3cf0 | gitpython | 3.2.1 | 1 |
| pangeo/ | 5fbe688a4f80 | gitpython | 3.2.1 | 1 |
| robmarkcole/ | 410275726459 | gitpython | 3.2.1 | 1 |
| sirrend/ | 699e79e3d4e2 | gitpython | 3.2.1 | 1 |
| sirrend/ | 7ca688c7abf5 | gitpython | 3.2.1 | 1 |
| sruthitanneru/ | e565ea454ffd | gitpython | 3.2.1 | 1 |
| stackstorm/ | 88235ba70cad | gitpython | 3.2.1 | 1 |
| stackstorm/ | 6f56d239d280 | gitpython | 3.2.1 | 1 |
| stackstorm/ | 33ecfda16608 | gitpython | 3.2.1 | 1 |
| stackstorm/ | 4e3f8c7ca52d | gitpython | 3.2.1 | 1 |
| stackstorm/ | f190a6212195 | gitpython | 3.2.1 | 1 |
| stackstorm/ | 259503496ff9 | gitpython | 3.2.1 | 1 |
| stackstorm/ | b1de2055c362 | gitpython | 3.2.1 | 1 |
| stackstorm/ | b1a338f64773 | gitpython | 3.2.1 | 1 |
| stackstorm/ | 1c8904a3bf67 | gitpython | 3.2.1 | 1 |
| stackstorm/ | 1bf35bfaf00c | gitpython | 3.2.1 | 1 |
| stackstorm/ | 19fdfffdbba8 | gitpython | 3.2.1 | 1 |
| tachyongroup/ | 7e79b9000856 | gitpython | 3.2.1 | 1 |
| tachyongroup/ | f4f7fabe1037 | gitpython | 3.2.1 | 1 |
| gcr.io/ | 25d6975951f1 | gitpython | 3.2.1 | 1 |
| ghcr.io/ | a2be95de450c | gitpython | 3.2.1 | 1 |
| quay.io/ | 65694109877e | gitpython | 3.2.1 | 1 |