{"id":"ROOT-APP-PYPI-CVE-2026-78676","summary":"CVE-2026-78676 in GitPython - Patched by Root","details":"Root has patched CVE-2026-78676 in the GitPython package for Root:PyPI. Multiple fixed versions available.","modified":"2026-09-22T11:15:05.945912160Z","published":"2026-09-22T10:34:06Z","upstream":["CVE-2026-78676"],"database_specific":{"source":"Root","distro":"pypi","distro_version":"","severity":"CRITICAL"},"affected":[{"package":{"name":"GitPython","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.47+aikido.8"},{"fixed":"3.1.47+aikido.9"},{"fixed":"3.1.46+aikido.12"},{"fixed":"3.1.58+aikido.1"},{"fixed":"3.1.58+aikido.2"},{"fixed":"3.1.58+aikido.3"},{"fixed":"3.1.46+aikido.11"},{"fixed":"3.1.46+aikido.13"}]}],"database_specific":{"root_patch_version":"aikido.13","root_patched":true,"total_fixed_versions":8,"upstream_version":"3.1.46","all_fixed_versions":["3.1.47+aikido.8","3.1.47+aikido.9","3.1.46+aikido.12","3.1.58+aikido.1","3.1.58+aikido.2","3.1.58+aikido.3","3.1.46+aikido.11","3.1.46+aikido.13"],"source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-78676.json"}},{"package":{"name":"gitpython","ecosystem":"Root:PyPI"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.58+aikido.1"}]}],"database_specific":{"total_fixed_versions":1,"upstream_version":"3.1.58","source":"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-78676.json","all_fixed_versions":["3.1.58+aikido.1"],"root_patch_version":"aikido.1","root_patched":true}}],"schema_version":"1.9.0"}