{"id":"ROOT-APP-PYPI-CVE-2026-42284","summary":"CVE-2026-42284 in GitPython - Patched by Root","details":"Root has patched CVE-2026-42284 in the GitPython package for Root:PyPI. Multiple fixed versions available.","modified":"2026-09-18T14:15:04.510359010Z","published":"2026-09-18T13:36:43Z","upstream":["CVE-2026-42284"],"database_specific":{"distro":"pypi","distro_version":"","severity":"HIGH","source":"Root"},"affected":[{"package":{"name":"GitPython","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.46+aikido.5"},{"fixed":"3.1.46+aikido.12"},{"fixed":"3.1.46+aikido.11"},{"fixed":"3.1.46+aikido.6"},{"fixed":"3.1.46+aikido.7"},{"fixed":"3.1.46+aikido.8"},{"fixed":"3.1.46+aikido.9"},{"fixed":"3.1.46+aikido.10"}]}],"database_specific":{"upstream_version":"3.1.46","all_fixed_versions":["3.1.46+aikido.5","3.1.46+aikido.12","3.1.46+aikido.11","3.1.46+aikido.6","3.1.46+aikido.7","3.1.46+aikido.8","3.1.46+aikido.9","3.1.46+aikido.10"],"root_patch_version":"aikido.12","root_patched":true,"source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-42284.json","total_fixed_versions":8}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}