CyberRota Analysis
AI-GeneratedGitPython versions prior to 3.1.60 are vulnerable to a regular expression denial of service (ReDoS) attack due to improper handling of the author and committer fields in commit objects. An attacker can exploit this vulnerability by crafting a commit with a malformed author field, leading to significant CPU resource exhaustion during processing. Organizations using GitPython should prioritize patching to mitigate the risk of service disruption from this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic backtracking, exhausting CPU resources for over two minutes per commit access.